Email scrogged just after midnight

PCZero

• March 28, 2017 23:28

Email for all of my clients is scrogged just after midnight. Historically I have had an SSL certificate set up as shared and it worked just fine for years. It is about to expire in three weeks but I do not think that is relevant info. I use Eudora as my mail client and I (and my clients) get the error for ALL email accounts on the server "The server's SSL certificate was rejected for the following reason: Unknown Error" I have attempted to use the install certificate method to fix this but it is not working at all for me or ANY of my clients. By logging into webmail I discovered that cPanel force installed some sort of free SSL certificate just at the same time the errors started. "Your system upgrade to cPanel & WHM includes a free SSL certificate for your server's hostname. This email confirms that the system will soon automatically download and install your free SSL certificate. Comodo cross-signs your new certificate, which 99.9% of browsers trust. Your free certificate will renew automatically, less than one week before its expiration date, at no cost to you. For more information, read our Release Notes on free cPanel-signed hostname certificates. The certificate covers the following domains: myhostanme.mydomain.com www.myhostname.mydomain.com" What the hell is going on and how do I fix this ASAP. I already have several clients calling me demanding a fix. SUGGESTION: NEVER EVER force install things like this on serves. It can cause errors like what I am experiencing!

• 

  cPanelMichael

  • March 29, 2017 16:25

  Hello @PCZero, Information about the free cPanel-signed hostname SSL certificate is documented at: Free cPanel-Signed Hostname Certificate - cPanel Knowledge Base - cPanel Documentation Could you open a support ticket using the link in my signature so we can take a closer look at the affected system? You can post the ticket number here so we can update this thread with the outcome. Thank you.

  0
• 

  PCZero

  • March 29, 2017 20:12

  When using the wizard in WHM to create the ticket I get the following error. Error: The system failed to authorize access to the server with following error: API failure: (XID nykcbv) The temporary wheel user "get" operation failed with a "sudo" error: The system cannot create a temporary user because this server does not permit wheel users to use "sudo".

  0
• 

  PCZero

  • March 29, 2017 20:15

  In reading the documentation at the supplied link I see that I can disable the free cert by /var/cpanel/ssl/disable_service_certificate_management If I do this will it reverse all of the unrequested actions that cpanel performed and have my system back to the way it was?

  0
• 

  PCZero

  • March 30, 2017 02:07

  Michael please see ticket 8341797 - Email SSL errors occurring Thanks, David

  0
• 

  PCZero

  • March 30, 2017 05:01

  Over 24 hours and I still have clients who cannot access mail. This is not good. I am not at all trying to lay blame for the issue, it could be something that I have set up wrong on my end at the server, but I really would like to have someone look at the ticket as soon as possible please! Thanks...

  0
• 

  cPanelMichael

  • March 30, 2017 15:50

  Hello, To update, it looks like this issue relates to the Eudora email client and it's lack of support for SNI. The workaround suggested was to use the server's hostname as the mail server name in the email client configuration, or to switch to another email client that supports SNI. Thank you.

  0

Please sign in to leave a comment.