Skip to main content

DNSOnly SSL certs renewal problem

Wallu
So, because of the new (pain in the ass) changes to SSL cert renewal process, how am I supposed to renew (won't auto-renew) certs now? Domains: ns2.somedomain.com cpanel.ns2.somedomain.com cpcalendars.ns2.somedomain.com cpcontacts.ns2.somedomain.com mail.ns2.somedomain.com webmail.ns2.somedomain.com whm.ns2.somedomain.com

Comments

13 comments

Date Votes
  • cPRex Jurassic Moderator
    Hey there! The DNSOnly machine wouldn't create any DNS zones by itself, as those would all get synced from a webserver system in a normal cluster configuration. These domains can be disabled globally on the webserver in WHM:
    0
  • Wallu
    Hey @cPRex ..kinda double posting here :) ... I realized this effects not just DNSOnly, but WHM too, so posted
    0
  • cPRex Jurassic Moderator
    No problem - I'll reply to that larger thread :D
    0
  • horizon2021
    I noticed when trying to renew the hostname cert for a whm/cpanel server two days ago that even with service and proxy subdomains disabled (I don't use them and don't want them - I want all access to come over the specific firewalled port for each service) that it was trying to do dcv for those subdomains during the checkallsslcerts process, all of which subdomains failed DCV obviously except for the server hostname itself. It did successfully renew the server hostname cert though from the cpanel store after many tries.
    0
  • Wallu
    Yet again I have to write here, about the same SSL crap. Now, I added all my DNSOnly subdomains and sub-subs to dns, and they renewed after day or so. BUT, my whm host is not renewing, and the deadline gets closer and closer. I have added all whm host subs and sub-subs too, but still it won't renew, and I get notifications every night about Exim, cPanel and Dovecot certs expiring in less than 30 days. My cert expires Feb 23rd, so it's getting closer. What the hell am I supposed to do here @cPRex ? All domains in the notification e-mail resolve, every one of them, so why is it not renewing? - Wallu
    0
  • cPRex Jurassic Moderator
    February 23rd seems like plenty of time for the SSL to renew as hostname certificates get renewed when there are three days left:
    0
  • Wallu
    Riiight, I forgot about that already :) Kinda don't wanna get 90 e-mails in 30 days saying my cert is ending,.. but then again, don't wanna turn it off either,.. dilemma. Anyways, I'll wait, and hopefully it renews. Thanks @cPRex - Wallu
    0
  • Wallu
    So when is it supposed to renew @cPRex ? Still getting this: The system failed to acquire a signed certificate from the cPanel Store because of the following error: (XID nufg4x) The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request "POST ssl/certificate/whm-license/90-day": We were unable to process your request. Please try again later.
    ..and the cert: Expires: Wednesday, February 23, 2022 at 11:59:59 PM UTC Kinda cutting it close..
    0
  • cPRex Jurassic Moderator
    That should definitely be renewing by now - three days is when it should start to process. Can you submit a ticket to our team so we can take a look?
    0
  • Wallu
    That should definitely be renewing by now - three days is when it should start to process. Can you submit a ticket to our team so we can take a look?

    Yeah, doing it now
    0
  • cPRex Jurassic Moderator
    If you could post the ticket number here I'll be sure to follow along on my end as well.
    0
  • Wallu
    #94419144 @cPRex
    0
  • cPRex Jurassic Moderator
    Thanks for that - I'm watching that now!
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post