Skip to main content

WHM Service Certificate Not Renewing - cpanel store error

Comments

16 comments

  • SimpleSonic
    If you are using Sectigo as the AutoSSL provider, try switching to Let's Encrypt and that should resolve the issue.
    0
  • quietFinn
    @MHFraser I would not be very worried about that, I get those messages quite often, and the certificate is always renewed before it expires. @ResellerWiz WHM Service SSL Certificates has nothing to do with AutoSSL.
    0
  • MHFraser
    I would not be very worried about that, I get those messages quite often, and the certificate is always renewed before it expires.

    ok thanks, I'll keep an eye on it. I do have connections to the host directly so this will hurt if it doesn't renew.
    0
  • cPanelWilliam
    Hello! The error you reported indicates that Sectigo's servers cannot accept more incoming requests at that time. The workaround in this situation would be to try rerunning the checkallsslcerts
    script at a later time. Optionally, you can set up a cron under the root user to run the checkallsslcerts
    script as a workaround:
    0
  • MHFraser
    Hello! The error you reported indicates that Sectigo's servers cannot accept more incoming requests at that time. The workaround in this situation would be to try rerunning the checkallsslcerts
    script at a later time. Optionally, you can set up a cron under the root user to run the checkallsslcerts
    script as a workaround:

    thanks, have run several times and still failing for me. will setup the cronjob to run increasingly often until the cert renews. Requesting certificate from cPStore " The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request "POST ssl/certificate/whm-license/90-day": We were unable to process your request. Please try again later.
    0
  • SimpleSonic
    @ResellerWiz WHM Service SSL Certificates has nothing to do with AutoSSL.

    Oops! You are correct. I had used FleetSSL's Let's Encrypt cPanel plugin in the past that did include the service certificate and I confused the two.
    0
  • ttremain
    A server is having trouble renewing the service certificate that comes with a cpanel license. the license check comes back good. . . . . The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request "POST ssl/certificate/whm-license/90-day": We were unable to process your request. Please try again later.

    In a current case, we have one that all service certificates have expired. I was able to replace them with self-signed, but /usr/local/cpanel/bin/checkallsslcerts continues to fail.
    0
  • cPRex Jurassic Moderator
    @ttremain - if the renewals are failing, you should have good details as to why in the logs at WHM >> Manage AutoSSL under the "Logs" tab.
    0
  • ttremain
    @ttremain - if the renewals are failing, you should have good details as to why in the logs at WHM >> Manage AutoSSL under the "Logs" tab.

    Aren't the autossl logs just for user account SSL certificates? This is for service SSL certs.
    0
  • cPRex Jurassic Moderator
    Oooooh sorry about that! Service SSL renewals should show some details when you run the checkallsslcerts command, or the notification from the server will include something like this: " "The system failed to acquire a signed certificate from the cPanel Store because of the following error: (XID q7wtrj) The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request "POST ssl/certificate/whm-license/90-day": We were unable to process your request. Please try again later"" Do you have any similar output from the command that provides helpful details?
    0
  • ttremain
    Oooooh sorry about that! Service SSL renewals should show some details when you run the checkallsslcerts command, or the notification from the server will include something like this: " "The system failed to acquire a signed certificate from the cPanel Store because of the following error: (XID q7wtrj) The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request "POST ssl/certificate/whm-license/90-day": We were unable to process your request. Please try again later"" Do you have any similar output from the command that provides helpful details?

    Yes, the same error message I quoted above, is the one I was getting. Maybe I wasn't clear about that. I put it in a CRON to run every 5 minutes and after about 2 hours I got a valid SSL again. This seems to be a repeated theme. Does the cPanel store need additional servers to service their customers?
    0
  • cPRex Jurassic Moderator
    Oh I see my confusion now - the quote box was weirdly shaped on my screen so I never saw the initial error. The Sectigo delays are well-known, and unfortunately not up to us to resolve. Let's Encrypt has been the default SSL provider since version 112, but it doesn't do the hostname certificates..............yet!
    0
  • Reado
    [WARN] The system failed to acquire a signed certificate from the cPanel Store because of the following error: All HTTP and DNS DCV preflight checks failed! Our cPanel license has expired and won't renew!
    0
  • cPRex Jurassic Moderator
    If your cPanel license is expired, AutoSSL will not work properly either. You'll need to contact our Customer Service team through a ticket to get the license issue resolved, if that was purchased from us.
    0
  • Reado
    If your cPanel license is expired, AutoSSL will not work properly either. You'll need to contact our Customer Service team through a ticket to get the license issue resolved, if that was purchased from us.

    False alarm. I had some incorrect routing tables on our router that caused the SSL renewals to stop working! Now resolved. :)
    0
  • cPRex Jurassic Moderator
    Glad to hear it!!
    0

Please sign in to leave a comment.