AutoSSL - Domain failed domain control validation

ItsMattSon

• February 13, 2017 08:00

Hi guys, When i "Check" a domain in SSL/TLS > Manage AutoSSL, it shows this in the log. Can anyone tell me what it means and what's required to rectify? NOTE: My domain is at a registrar that is not my host and I'm pretty sure there's no CNAME for "mail". Is that related? 9:53:45 PM This system has AutoSSL set to use "cPanel (powered by Comodo)". 9:53:45 PM Checking websites for "lols" " 9:53:46 PM The website "mysite.com", owned by "lols", has a valid SSL certificate, but additional SSL coverage may be possible for the domain "mail.mysite.com". The system will attempt to replace this certificate with one that includes this additional domain. 9:53:46 PM WARN The domain "mail.mysite.com" failed domain control validation: "mail.mysite.com" does not resolve to any IPv4 addresses on the internet. at bin/autossl_check.pl line 562. 9:53:46 PM WARN All of "mysite.com""s unsecured domains failed domain control validation. AutoSSL skip this website. at bin/autossl_check.pl line 437. 9:53:46 PM The system has completed the AutoSSL check for "lols".

• 

  cPanelMichael

  • February 13, 2017 18:09

  Hello Matt, AutoSSL is attempting to generate the SSL certificate for the "mail" subdomain for use with Exim/Dovecot as part of the "Domain TLS" feature documented at: What is Domain TLS - cPanel Knowledge Base - cPanel Documentation However, it looks like it's failing because mail.domain.tld does not resolve to an IP address. You'd need to setup an "A" record or "CNAME" record for "mail" at the DNS hosting provider for the domain name so it resolves to the IP address associated with the account. Thank you.

  0
• 

  ItsMattSon

  • February 13, 2017 22:49

  Thanks @cPanelMichael, that did the trick :) I added a CNAME record for 'mail' and ran AutoSSL again and no errors. I can also now reach

  0
• 

  cPanelMichael

  • February 15, 2017 13:08

  Hello, The mail subdomain is not required, however it's useful for customers that use that hostname when setting up their email clients. Here's a quote from the

  0
• 

  ItsMattSon

  • February 16, 2017 03:04

  Hi cPanelMichael, After setting up some DNS records between then and now I haven't seen the 403 forbidden again. Your information was great though because I feel comfortable with the mail subdomain now and why it's there. Plus, you helped me figure out a different problem with why mail.domain.tld would always go to www.mail.domain.tld (which was due to my poorly constructed rewrite rule in my .htaccess enforcing https and a second to force www.) Much appreciated!

  0

Please sign in to leave a comment.