Skip to main content

AutoSSL Could not connect to 'store.cpanel.net:443'

Answered
cbrrbc
Good evening all! Issue: Installed AutoSSL to domain, but I receive: NET::ERR_CERT_INVALID when I access the url Logs: ERROR AutoSSL failed to request an SSL certificate for "(mydomain).(mymaindomain)" because of an error: (XID 4skdnz) The system failed to send an HTTP (Hypertext Transfer Protocol) "POST" request to " because of an error: Could not connect to 'store.cpanel.net:443': Name or service not known Also I get the following errors in the logs - but I guess these are normal (???): a. ERROR TLS Status: Defective b. Defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL"s verification (0:18:DEPTH_ZERO_SELF_SIGNED_CERT). Questions: 1. Is this normal that the cpanel constructs a certificate as a subdomain of the main domain? eg. main domain: www.thessl.com then the certificate is being created for the thessl.test.com 2. Firewall doesn't have any rule yet. 3. Any ideas or anything that I could share more with you? Thank you for the understanding I'm a noobie.

Comments

21 comments

Date Votes
  • cPRex Jurassic Moderator
    Hey there! Yes, AutoSSL will try and issue a certificate to every domain that is configured on the system. This includes subdomains and aliases configured in Apache. In your case, it seems like the system is not able to reach out store. If you just type this in on the server's command line, does it download the index.html page? wget https://store.cpanel.net
    That would confirm that your server is able to connect to the cPanel store. If that connection isn't working there is likely a firewall rule either on your system or outside of your server that is blocking this connection.
    0
  • cbrrbc
    Thank you a lot. That was correct - the nameserver was added as 8.8.8.8 on resolv.conf and it fixed the issues with any outgoing request.
    0
  • cPRex Jurassic Moderator
    Great - I'm glad that got you pointed in the right direction!
    0
  • DiBello Design

    having same problem.  however, cannot get a secure connection at cpanel

    wget https://store.cpanel.net
    --2024-01-05 13:03:10--  https://store.cpanel.net/
    Resolving store.cpanel.net (store.cpanel.net)... 104.18.35.25, 172.64.152.231
    Connecting to store.cpanel.net (store.cpanel.net)|104.18.35.25|:443... connected.
    Unable to establish SSL connection.

    0
  • cPRex Jurassic Moderator

    DiBello Design - have you tried turning off any firewalls on your system to see if that's the issue?

    0
  • DiBello Design

    I removed firewall entries back to September 2023 when AutoSSL was working.

    0
  • DiBello Design

    I get a connection to the cpanel store.  just not a ssl one

    0
  • cPRex Jurassic Moderator

    Can you let me know what let do that error?  Was it a problem with AutoSSL?  I would try running this test to see if you can make a connection at all:

    telnet store.cpanel.net 443

    and see if that connects.  If not, could you try this?

    telnet google.com 443

    That will just test the connection of outgoing port 443 on your server in general.

    0
  • DiBello Design

    23 is not open on my server.  however, I did just get this connection:

    wget https://store.cpanel.net
    --2024-01-05 17:36:44--  https://store.cpanel.net/
    Resolving store.cpanel.net (store.cpanel.net)... 172.64.152.231, 104.18.35.25
    Connecting to store.cpanel.net (store.cpanel.net)|172.64.152.231|:443... connected.
    HTTP request sent, awaiting response... 301 Moved Permanently
    Location: https://store.cpanel.net/cart/ [following]
    --2024-01-05 17:36:44--  https://store.cpanel.net/cart/
    Reusing existing connection to store.cpanel.net:443.
    HTTP request sent, awaiting response... 200 OK
    Length: unspecified [text/html]
    Saving to: ‘index.html’

        [ <=>                                                                                                                                 ] 34,331      --.-K/s   in 0.001s

    2024-01-05 17:36:44 (31.7 MB/s) - ‘index.html’ saved [34331]

     

    0
  • cPRex Jurassic Moderator

    I'm not sure where 23 came from, but I'm glad you are able to make the connection now.  Did you change anything on your end to get things working?

    0
  • DiBello Design

    still getting this error though:

    (XID edxag9) The system failed to send an HTTP (Hypertext Transfer Protocol) “POST” request to “https://store.cpanel.net/json-api/ssl/certificate/free” because of an error: SSL connection failed for store.cpanel.net: SSL connect attempt failed

    0
  • DiBello Design

    I had a temporary block on some cloudflare ip's. 

     

    0
  • cPRex Jurassic Moderator

    Is the AutoSSL tool also working after lifting that block or is that still happening?

    0
  • DiBello Design

    Not really.  Two domains managed to get into the pending list while 7 others still have the connection failed to cpanel store error.

    0
  • cPRex Jurassic Moderator

    It sounds like there could be other issues with the machine - it would be best to create a ticket to have this investigated.

    0
  • DiBello Design

    Am I correct in that the license key is with the data center and not in my name?  And I need to submit the ticket to them?

    0
  • cPRex Jurassic Moderator

    You can see who owns the license by checking our page here and putting in the main IP address of the server:

    https://verify.cpanel.net/app/verify

    0
  • DiBello Design

    thanks.  yea, it's the data center.

    0
  • cPRex Jurassic Moderator

    Let us know what you find out!

    0
  • DiBello Design

    sorry for the late response.  Switched from Sectigo to Let's Encrypt and have had zero issues over the last month

    -1
  • cPRex Jurassic Moderator

    Glad to hear it!

    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post