Skip to main content

Is there an issue with Sectigo?

GoWilkes
My main site had an error today with updating the security certificate via AutoSSL: Analyzing "example""s domains " 8:33:21 PM Analyzing "example.co" (website) " 8:33:21 PM ERROR TLS Status: Defective ERROR Certificate expiry: 2/15/21, 12:00 AM UTC (0.06 days ago) ERROR Defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL"s verification (0:10:CERT_HAS_EXPIRED).
I see that someone else had the same error last week, but no solution was posted. I turned off CSF and cPHulk then tried to renew again, but I had the same error. I changed /etc/resolv.conf to Cloudflare to make sure it wasn't an issue there, and made sure that I could dig root-servers.net (no problems). Then I changed the default provider to Let's Encrypt, and it installed a new cert with no problem. I can't use that forever, though, because of the domain limits; it didn't even cover all of the parked domains and subdomains on this one account, but it covered the important stuff so it's an OK band-aid. Any idea what's going on?

Comments

18 comments

Date Votes
  • pixellegolas
    I had same issue but just now when I pressed check in WHM it magicallt started to queue in pending. Do a manual check again. Maybe was a temporary thing at their place
    0
  • GoWilkes
    Some of mine were processed, but I still have 174 pending. I did a manual check at 6:37pm, and now it's 8pm but they're still pending.
    0
  • GoWilkes
    As an update, after I changed my provider back to Sectigo I found this in the logs: 6:37:20 PM Processing "example""s local DCV results " 6:37:20 PM Analyzing "example.co""s DCV results " 6:37:20 PM AutoSSL will request a new certificate. 6:37:20 PM The system will attempt to renew the SSL certificate for (example.co: example.co www.example.co mail.example.co [and 100 more domains]). 6:37:26 PM The cPanel Store received "example.co""s certificate order. (Order Item ID: 1118084585) The system will periodically poll the cPanel Store for the issued certificate and then install it after a successful retrieval. The system has completed "example""s AutoSSL check. 6:38:01 PM Polling for "example""s new certificate for "example.co" (order item ID "1118084585") " The certificate is not available. (processing) 6:40:02 PM Polling for "example""s new certificate for "example.co" (order item ID "1118084585") " The certificate is not available. (processing) 6:42:01 PM The queue contains a request for a certificate for "example""s website "example.co" (order item ID "1118084585"). The system last polled for this certificate at Feb 16, 2021, 11:40:02 PM UTC. The next poll will happen no earlier than Feb 16, 2021, 11:42:02 PM UTC.
    The last 3 lines were repeated 421 times :-O At around 1am, I went to "Manage AutoSSL Hosts" and deleted the host for example.co, then resubmitted it. This time it said: 1:07:36 AM Processing "example""s local DCV results " 1:07:36 AM Analyzing "example.co""s DCV results " 1:07:36 AM AutoSSL will request a new certificate. 1:07:36 AM The system will attempt to renew the SSL certificate for (example.co: example.co www.example.co mail.example.co [and 100+ more]). The "cPanel (powered by Sectigo)" provider"s AutoSSL queue already contains a certificate request for "example""s website "example.co". The request"s start time is Feb 16, 2021, 11:37:15 PM UTC, and its last poll time is Feb 17, 2021, 5:12:01 AM UTC. The system has completed "example""s AutoSSL check.
    That looked like it was going to be installed, but by 9am it was not! So I had to set it back to Let's Encrypt, which immediately installed a new cert (although it leaves several of my domains unprotected).
    0
  • GoWilkes
    Problem is resolved with help from Tech Support... It looks like Sectigo's problem has cleared up, but there's been no verification whether they ACTUALLY had a problem. Since 3 people on this forum had a problem at the same time then I think it had to have been on their end, but that's not official. I still had 174 domains in the Pending Queue, though, and somehow that was causing the connection to Sectigo to time out. The tech had to clear the pending queue, following the instructions here:
    0
  • cPRex Jurassic Moderator
    Hey there! I didn't officially hear anything on my end about an issue, but with multiple reports here there had to be something on their end. Even if it was just a brief problem that could still cause certificates to backup in the queue.
    0
  • Ruiz
    Hi there, Is this problem back? Because i have 2 domains that are stuck in Sectigo queue for 3 days now. Also autossl logs show the same request 50 times in a row (see image attached) I already tried to clear autossl database by renaming /var/cpanel/autossl_queue_cpanel.sqlite, but except for the file size, nothing changed. Sectigo Order ID is 1168283515. I'm also creating a ticket for this. Thanks!
    0
  • cPRex Jurassic Moderator
    I haven't heard anything on my end about this today. If you could post the ticket number here I can follow along and make sure this thread stays updated.
    0
  • Ruiz
    Ticket id is #94320933 Thank you cPRex!
    0
  • cPRex Jurassic Moderator
    Thanks for that - I'm following along with that ticket now on my end.
    0
  • cPRex Jurassic Moderator
    After some troubleshooting, it was determined the issue with the AutoSSL system was a problem with the DNSSEC records on the domain. Once that was resolved, the certificate was able to be issued normally.
    0
  • Metro2
    Hi there, Is this problem back? Because i have 2 domains that are stuck in Sectigo queue for 3 days now. Also autossl logs show the same request 50 times in a row (see image attached)

    I've run into this myself today as well. Created a new hosting account 8 hours ago: 3:23:01 PM The queue contains a request for a certificate for "example""s website "example.com" (order item ID "1200510685"). The system last polled for this certificate at Jun 13, 2021, 7:21:01 PM UTC. The next poll will happen no earlier than Jun 13, 2021, 7:23:01 PM UTC.
    And still: 11:35:01 PM The queue contains a request for a certificate for "example""s website "example.com" (order item ID "1200510685"). The system last polled for this certificate at Jun 14, 2021, 3:01:02 AM UTC. The next poll will happen no earlier than Jun 14, 2021, 4:01:02 AM UTC.
    And doing a "check" on it just regurgitates: 11:38:22 PM Processing "example""s local DCV results " 11:38:22 PM Analyzing "example.com""s DCV results " 11:38:22 PM AutoSSL will request a new certificate. 11:38:22 PM The system will attempt to renew the SSL certificate for (example.com: example.com www.example.com mail.example.com). The "cPanel (powered by Sectigo)" provider"s AutoSSL queue already contains a certificate request for "example""s website "example.com". The request"s start time is Jun 13, 2021, 7:19:23 PM UTC, and its last poll time is Jun 14, 2021, 3:01:02 AM UTC. The system has completed "example""s AutoSSL check.
    (And there is not DNSSEC on this new domain) :confused:
    0
  • cPJustinD
    It does appear that there is a delay in the issuance of SSL certificates from Sectigo. More information on this can be found here:
    0
  • Metro2
    It does appear that there is a delay in the issuance of SSL certificates from Sectigo. More information on this can be found here: Sectigo it shows everything as all clear, and if you click the History link on that page it says June 13, 2021 1:00AM UTC [Update] Scheduled Maintenance Sectigo Certificate Issuing Platform is complete.
    0
  • cPJustinD
    If the status is clear, the certificate should be issued shortly after. If you're still getting a certificate issued, it may be best to open a support ticket so that our analysts can review the issue more thoroughly and determine what exactly is occurring. You can submit a support request using the "Submit a ticket" link in my signature below. Please be sure to link this thread when opening the ticket and provide the ticket number here so that we can track the issue appropriately. If possible, please post the resolution on this thread as it may help other community members with similar issues.
    0
  • cPRex Jurassic Moderator
    Update - I just wanted to let everyone know we are still seeing odd delays with Sectigo at this time.
    0
  • dave321
    Using AutoSSL (Sectigo) error as follows. Have two new domains waiting for SSL Cert, sitting in queue for 4 days. Log for the AutoSSL run for "example": Friday, November 26, 2021 1:15:54 PM GMT-0800 (cPanel (powered by Sectigo)) 1:15:54 PM Analyzing "example.com" " 1:15:54 PM ERROR TLS Status: Defective ERROR Defect: NO_SSL: No SSL certificate is installed. 1:15:54 PM Attempting to ensure the existence of necessary CAA records " ... Thanks in advance.
    0
  • GoWilkes
    You'll probably get better replies if you create a new thread on that one instead of piggybacking on an old one. But here's what I found when I searched that error:
    0
  • dave321
    Thank you. Will try that.
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post