AutoSSL Error (Verify registration and authoritative nameserver configuration for this domain or to correct this problem.)
Hi there,
We are experiencing some problems with the auto provisioning of SSLs on some of our hosting accounts. See output below. We manage all our own DNS in multiple DNSOnly nameservers.
~
Log for the AutoSSL run for "hosting_account_name": Monday, January 18, 2021 10:03:34 AM GMT+1000 (cPanel (powered by Sectigo))
10:03:34 AM AutoSSL"s configured provider is "cPanel (powered by Sectigo)".
This AutoSSL provider does not poll for certificate availability immediately after a certificate request submission. Instead, it submits certificate requests then periodically polls the cPanel Store for each requested certificate and installs it after a successful retrieval. The system will record all requests, retrievals, and installations for the current AutoSSL run in this log.
Analyzing "hosting_account_name""s domains "
10:03:34 AM Analyzing "domain_name.com.au" (website) "
10:03:34 AM ERROR TLS Status: Defective
ERROR Certificate expiry: 9/7/20, 12:00 AM UTC (133 days ago)
ERROR Defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL"s verification (0:10:CERT_HAS_EXPIRED).
10:03:34 AM Attempting to ensure the existence of necessary CAA records "
10:03:36 AM No CAA records were created.
10:03:36 AM Verifying 8 domains" management status "
Verifying "cPanel (powered by Sectigo)""s authorization on 8 domains via DNS CAA records "
WARN DNS query error (webdisk.domain_name.com.au/NS): SERVFAIL (2)
WARN DNS query error (webmail.domain_name.com.au/NS): SERVFAIL (2)
WARN DNS query error (cpcalendars.domain_name.com.au/NS): SERVFAIL (2)
WARN DNS query error (cpanel.domain_name.com.au/NS): SERVFAIL (2)
WARN DNS query error (www.domain_name.com.au/CAA): SERVFAIL (2)
WARN DNS query error (www.domain_name.com.au/NS): SERVFAIL (2)
WARN DNS query error (cpcontacts.domain_name.com.au/NS): SERVFAIL (2)
WARN DNS query error (domain_name.com.au/NS): SERVFAIL (2)
10:03:36 AM ERROR "www.domain_name.com.au" is unmanaged. Verify registration and authoritative nameserver configuration for this domain or "domain_name.com.au" to correct this problem.
ERROR "cpanel.domain_name.com.au" is unmanaged. Verify registration and authoritative nameserver configuration for this domain or "domain_name.com.au" to correct this problem.
ERROR "webdisk.domain_name.com.au" is unmanaged. Verify registration and authoritative nameserver configuration for this domain or "domain_name.com.au" to correct this problem.
ERROR "webmail.domain_name.com.au" is unmanaged. Verify registration and authoritative nameserver configuration for this domain or "domain_name.com.au" to correct this problem.
ERROR "cpcontacts.domain_name.com.au" is unmanaged. Verify registration and authoritative nameserver configuration for this domain or "domain_name.com.au" to correct this problem.
ERROR "cpcalendars.domain_name.com.au" is unmanaged. Verify registration and authoritative nameserver configuration for this domain or "domain_name.com.au" to correct this problem.
ERROR "domain_name.com.au" is unmanaged. Verify this domain"s registration and authoritative nameserver configuration to correct this problem.
10:03:36 AM WARN DNS query error (mail.domain_name.com.au/NS): SERVFAIL (2)
10:03:36 AM ERROR "mail.domain_name.com.au" is unmanaged. Verify registration and authoritative nameserver configuration for this domain or "domain_name.com.au" to correct this problem.
AutoSSL cannot confirm management status for any of this user"s 8 domains are unmanaged.AutoSSL cannot secure any domain without confirming its management status.
10:03:36 AM WARN DNS query error (domain_name.com.au/CAA): SERVFAIL (2)
10:03:36 AM CA authorized: "domain_name.com.au"
CA authorized: "www.domain_name.com.au"
10:03:37 AM WARN DNS query error (cpanel.domain_name.com.au/CAA): SERVFAIL (2)
10:03:37 AM CA authorized: "cpanel.domain_name.com.au"
10:03:37 AM WARN DNS query error (cpcontacts.domain_name.com.au/CAA): SERVFAIL (2)
10:03:37 AM CA authorized: "cpcontacts.domain_name.com.au"
10:03:37 AM WARN DNS query error (webdisk.domain_name.com.au/CAA): SERVFAIL (2)
10:03:37 AM CA authorized: "webdisk.domain_name.com.au"
10:03:37 AM WARN DNS query error (cpcalendars.domain_name.com.au/CAA): SERVFAIL (2)
10:03:37 AM CA authorized: "cpcalendars.domain_name.com.au"
10:03:37 AM WARN DNS query error (webmail.domain_name.com.au/CAA): SERVFAIL (2)
10:03:37 AM CA authorized: "webmail.domain_name.com.au"
10:03:37 AM WARN DNS query error (mail.domain_name.com.au/CAA): SERVFAIL (2)
10:03:37 AM CA authorized: "mail.domain_name.com.au"
"cPanel (powered by Sectigo)" is authorized to issue certificates for 8 of this user"s 8 domains.
10:03:37 AM AutoSSL cannot increase "hosting_account_name""s SSL coverage.
~
Lots of similar threads on this one - I have tried the following
###
for i in {a..m}; do echo -n "$i.root-servers.net: "; dig -4 "$i".root-servers.net @"$i".root-servers.net +short;done
###
~~
a.root-servers.net: 198.41.0.4
b.root-servers.net: 199.9.14.201
c.root-servers.net: 192.33.4.12
d.root-servers.net: 199.7.91.13
e.root-servers.net: 192.203.230.10
f.root-servers.net: 192.5.5.241
g.root-servers.net: 192.112.36.4
h.root-servers.net: 198.97.190.53
i.root-servers.net: 192.36.148.17
j.root-servers.net: 192.58.128.30
k.root-servers.net: 193.0.14.129
l.root-servers.net: 199.7.83.42
m.root-servers.net: 202.12.27.33
~~
Can anyone assist please?
Thanks
-
Hey there! We may need to take a closer look at the specific domain affected as well as the server. Would you mind opening a support ticket at tickets.cpanel.net, please? 0 -
will do 0 -
will do, can you close this thread and I will communicate on the ticket 0 -
@ionline_pty_ltd - if you can share the ticket number here I can follow along and keep the community updated with our findings. 0 -
@ionline_pty_ltd - if you can share the ticket number here I can follow along and keep the community updated with our findings.
did we ever find out what happened here?? I'm having the same issues on a new server recently deployed...0 -
Since there wasn't a reply to the earlier message, I don't know of a resolution for this specific issue. Could you post your AutoSSL errors, just making sure to remove the public information like domains or IP addresses? 0
Please sign in to leave a comment.
Comments
6 comments