Skip to main content

[COBRA-13510] Do I need to manually update service SSL certificates on cPanel?

BlueSteam
Hi All, I'm getting notices that the cPanel signed SSL certificates for the services are expiring soon and I just want to pre-empt this before I run in to a problem. Do I need to manually renew them or will they auto-renew? I know I have the option of clicking "Reset Certificate" under "Manage Service SSL Certificates" but that will install a self-signed certificate according to the warning right before you proceed as well as the cPanel documentation and I don't want that. Why anyone would want a self-signed on a cPanel server I really don't know. Anyway, Do I need to manually do it or will it automatically renew like AutoSSL does for the domains? If I do need to do it manually, how do I go about forcing an update on the certificates for a cPanel signed certificate? I appreciate the replies.

Comments

30 comments

Date Votes
  • quietFinn
    Anyway, Do I need to manually do it or will it automatically renew like AutoSSL does for the domains?

    It will renew automatically.
    0
  • BlueSteam
    Do you know if it renews 5days before? or 30 days before?? because it says there are 18days left before it expires and Im just wondering when it happens.
    0
  • quietFinn
    I can't remember that, but I know that for our servers the Service SSL Certificates has been renewed automatically without problems for years. You can find more information here:
    0
  • BlueSteam
    Thank you so much Finn :-D I will keep an eye on it but at least you have set my mind at ease.
    0
  • quietFinn
    cPanel will renew the certificate if there is not anything that prevents it from doing it.
    0
  • BlueSteam
    I hope cPanel will notify me if it fails to update the cert so that I can handle the problem. :-)
    0
  • cPanelAnthony
    Hello! It's possible to configure notifications for service SSL issues such as the certs expiring or a failure occurring.
    0
  • BlueSteam
    So I woke up this morning and received a bunch of these for all the services. It is prompting me to act and update the certificates but everyone here tells me it will do it automatically?? Do I still just leave it and wait??
    0
  • cPanelAnthony
    Hello! They should renew automatically. If you receive another notification about them expiring after this one, please let us know or open a support ticket using the link in my signature.
    0
  • BlueSteam
    Thanks Anthony. I will let you know if it is a problem.
    0
  • Metro2
    I get those same notices for services such as "The SSL (Secure Sockets Layer) certificate for "cpanel" on "hostname.example.com" will expire in less than 30 days" at the end of October every year as well since 2017, and so far they have automatically renewed every year without any problems.
    0
  • BlueSteam
    Thanks Metro. What I would like to know is when they get renewed before expiry because I've been getting these notices everyday now and I don't want to pester anyone in case they will just autorenew. So I'm waiting until at least 7 days before I make more noise about it.
    0
  • cPanelAnthony
    Hello again! I believe the following article should be of great help to you.
    0
  • BlueSteam
    Thank you @cPanelAnthony but today marks another day where I received the warnings of the service SSLs expiring. According to the article, AutoSSL renews cPanel certificates 15 days before expiry. My certificates expire on the 14th of this month which means AutoSSL has not done it's job. Should I be concerned??
    0
  • cPanelAnthony
    Hello! It is likely that AutoSSL will still run. However, would you be able to open a ticket with your web hosting provider to review the AutoSSL logs? They should be able to open ticket directly with cPanel if needed as well.
    0
  • BlueSteam
    I am the admin of the cPanel server. I have full root access. The server is my own. Where are the logs and what should I be looking for?
    0
  • cPanelAnthony
    My apologies! I misread your access level. You can open a ticket with cPanel directly via the link in my signature. Otherwise, you will want to review the AutoSSL logs to see what error output shows when an SSL attempts to install on the domain. This article should help you find them.
    0
  • BlueSteam
    But these are for the service SSLs. Not for any domain as an account on the server.
    0
  • cPanelAnthony
    Hello again! Understood, my apologies for the confusion. Could you please open a support ticket using the link in my signature? Once done, please update me with the ticket ID. I believe this would warrant some investigation.
    0
  • BlueSteam
    Hello Anthony Sincerest apologies but it seems either you don't have a signature in your posts or I'm just not understanding how the forums work here. How do I see your signature? All I see is your post text.
    0
  • cPanelAnthony
    Does this work? I'm not sure why you would be unable to see it.
    0
  • BlueSteam
    Yes that works. Thanks Anthony. Here is the ticket ID: #94379519 I had some typos in the ticket because I opened it from my mobile. Sorry about that.
    0
  • cPanelAnthony
    Thanks! I am watching this ticket and will post the solution here.
    0
  • BlueSteam
    I see this is a known issue and is related to internal case ID COBRA-13510. Support has resolved the issue with the following article:
    0
  • cPanelAnthony
    I'm glad to hear you got this resolved! Thank you for posting the solution here.
    0
  • BlueSteam
    You're welcome. And thanks again Anthony
    0
  • cPanelAnthony
    This is fixed in version 102.
    0
  • BlueSteam
    This is fixed in version 102.

    That would explain why I'm still getting these warning notifications again. Latest stable build is 100 which is what I'm running ony server and 3 months ago this thread was opened. 3 months later, version 102 has not been release as stable so my SSLs are once again not updating. Please can you provide the workaround fix here until the server is updated to version 102?
    0
  • cPanelAnthony
    Version 102 should move to "release" in February. To confirm, does the workaround in
    0
  • BlueSteam
    Hi Anthony, Yes, that resolved my issue. Thank you very much for the article.
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post