Failing to acquire SSL on DNSONLY Server

nsiamwanda

• January 09, 2023 02:03

Good day -- I am having an issue on my DNSONLY server. I can't seem to get my certificate to renew and fetch from the store, I keep getting the following error: ___ Requesting certificate from cPStore " The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request "POST ssl/certificate/whm-license/90-day": We were unable to process your request. Please try again later. Undoing HTTP DCV setup (/usr/local/apache/htdocs/.well-known/pki-validation/06687130E19CF86241B559AD0CAD9E7F.txt) " " complete. Enqueueing undo of DNS DCV setup (CNAME _06687130e19cf86241b559ad0cad9e7f.za-cptnms001.bcity.me) " Undoing DNS DCV setup " " done. [WARN] The system failed to acquire a signed certificate from the cPanel Store because of the following error: (XID 9ketpd) The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request "POST ssl/certificate/whm-license/90-day": We were unable to process your request. Please try again later. The system will check for the certificate for the "exim" service. The system will attempt to replace the self-signed certificate for the "exim" service with a signed certificate from the cPanel Store. The system will attempt to install a certificate for the "exim" service from the system ssl storage. None of the certificates in the system ssl storage were acceptable to use for the "exim" service. ___ I have tried the advise on:

• 

  cPRex Jurassic Moderator

  • January 09, 2023 16:35

  Hey there! There isn't a good workaround for this issue, as the AutoSSL system at Sectigo is just overloaded. Usually this gets issued within 24 hours, but if that doesn't happen, please submit a ticket to our team so we can take a look.

  0
• 

  PeteS

  • January 15, 2023 06:35

  Usually this gets issued within 24 hours

  
  I'm seeing this error... "The system failed to acquire a signed certificate from the cPanel Store because of the following error: (XID 9z7ydf) The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request "POST ssl/certificate/whm-license/90-day": We were unable to process your request. Please try again later." ...night after night on my DNS Only servers. Eventually one resolved (issued), the other is still struggling. (So hostnamer requests on other full cPanel servers.)

  0
• 

  cPRex Jurassic Moderator

  • January 16, 2023 01:39

  @PeteS - could you open a ticket for the recurring issue on the DNSOnly system?

  0
• 

  PeteS

  • January 16, 2023 02:22

  @PeteS - could you open a ticket for the recurring issue on the DNSOnly system?

  
  Before I do that, let me correct myself, incase there is a simple solution to it. I apologize for mixing up cert errors; there have been so many lately... That error was on a full cPanel server (which resolved last night), and on a DNSOnly from 1/6 - 1/10 but finally resolved. The DNSOnly server that is still failing started giving a <30 notice on 1/6, then since 1/11 has had the following error. "The system failed to acquire a signed certificate from the cPanel Store because of the following error: The system failed to acquire a signed certificate from the cPanel Store. ({"domain_details":null,"status":"revoked","status_details":null,"status_message":"Stale CSR"})"

  0
• 

  cPRex Jurassic Moderator

  • January 16, 2023 02:28

  That could be something different - can you try this?

  0
• 

  PeteS

  • January 16, 2023 02:42

  That could be something different - can you try this?

  0
• 

  cPRex Jurassic Moderator

  • January 16, 2023 02:45

  Well that's not good...try this mv /var/cpanel/hostname_cert_csrs{,.cpbkp} -v
  then run the classic: /usr/local/cpanel/bin/checkallsslcerts
  to force another run.

  0
• 

  cPRex Jurassic Moderator

  • January 16, 2023 02:46

  Ah, here's the updated link...I just had bad browser history:

  0
• 

  PeteS

  • January 16, 2023 03:12

  Well that's not good...try this mv /var/cpanel/hostname_cert_csrs{,.cpbkp} -v
  then run the classic: /usr/local/cpanel/bin/checkallsslcerts
  to force another run.

  
  I believe you meant -v (not -v), in case you want to correct for future readers. :) Yes, that resolved that error... new error takes one of these forms: "The response to the HTTP (Hypertext Transfer Protocol) "POST" request from " indicated an error (503, Service Unavailable):

  503 Service Una"" or "The response to the HTTP (Hypertext Transfer Protocol) "POST" request from " indicated an error (504, Gateway Timeout):

  504 Gateway Tim"" or "The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request "POST ssl/certificate/whm-license/90-day": We were unable to process your request. Please try again later." The 503 error is what I was getting last night when manually running /usr/local/cpanel/bin/checkallsslcerts on a full cPanel server, but it resolved on the next upcp. It had been having the hostname cert issue since 1/9. I'll give this DNSOnly a little time to sort it out...

  0
• 

  PeteS

  • January 17, 2023 08:22

  I'll give this DNSOnly a little time to sort it out...

  
  It updated on tonight's upcp.

  0

Please sign in to leave a comment.