AutoSSL Feedback

ebizindia

• October 06, 2016 01:03

Extremely disappointed with the way AutoSSL works on renewal of certificates earlier issued by another agency. I have to manually buy certificates after experiencing a downtime of the sites in each such case. The AutoSSL file validation failed in many cases but that is another story. Even after successful validation, a new certificate request was sent was the certificate was never received. We kept waiting and then had to manually the certificate to keep the site operational. I sincerely request that this process needs to be made more responsive. I am now awaiting another certificate renewal for the server and am fairly convinced that even this will fail.

• 

  cPanelMichael

  • October 06, 2016 23:13

  Hello @ebizindia, I'm sorry to see you are disappointed with the AutoSSL functionality. In cPanel version 60, we now automatically update .htaccess files to exclude DCV checks from HTTP redirections so that the DCV checks complete successfully. This resolves issues that some customers reported with AutoSSL and cPanel Market purchases. You can review the full release notes for cPanel version 60 (with references to some additional AutoSSL improvements) at: 60 Release Notes - Documentation - cPanel Documentation Regarding the certificate request process, the following utility runs every five minutes as part of a cron job to see if a certificate has been processed:
  /usr/local/cpanel/bin/autossl_check_cpstore_queue
  Could you let us know how long the certificate was in the processing stage before you manually installed a certificate? We have a thread here that goes into more detail about the ordering process: cPanel & WHM"s AutoSSL/SSL ordering process Thank you.

  0
• 

  cPanelNick

  • October 07, 2016 00:18

  Good news: In 11.60 we will over an option to allow you to configure if non-AutoSSL certificates get overwritten. This is already available for testing in 11.59.9999.169 and later in the EDGE tier.

  0
• 

  ebizindia

  • October 07, 2016 08:09

  I checked the log and got this:
  10:05:01 PM WARN The request for a certificate for the website "example.com" has taken more than the allowed time (8 days). The system will no longer track this request. at bin/autossl_check_cpstore_queue.pl line 246.
  I will need the certificate for the server renewed in a couple of days and I am worried that even this will fail. Can I do something to ensure that it does not?

  0
• 

  ebizindia

  • October 07, 2016 08:11

  Can you provide a rough timeline for ver 60 to get in the Release tier?

  0
• 

  cPanelMichael

  • October 07, 2016 13:30

  I will need the certificate for the server renewed in a couple of days and I am worried that even this will fail. Can I do something to ensure that it does not?

  
  Could you open a support ticket using the link in my signature so we can take a closer look at your system and determine why the certificate didn't process? You can post the ticket number here so we can update this thread with the outcome.

  Can you provide a rough timeline for ver 60 to get in the Release tier?

  
  It's tentatively scheduled for the "Current" build tier early next week. There's currently no specific time frame to offer on it's publication to the "Release" tier, though it typically takes 2 to 4 weeks for a version to go from "Current" to "Release". Here's a document and blog post that explains the process: Product Versions and the Release Process - cPanel Knowledge Base - cPanel Documentation The cPanel Development Process | cPanel Blog Thank you.

  0

Please sign in to leave a comment.