Skip to main content

The domain failed domain control validation

Comments

10 comments

  • cPanelMichael
    Hello @dmitry.vd, Do you have any redirect rules configured for this domain name? The error message suggests the request for the .TXT DCV file was redirected to another file, and the request was blocked because the size of the response body exceeded the 16-KiB limit. Thank you.
    0
  • Thiago Ortega
    How was it solved? See error that occurs when I make an AutoSSL
    OPENSSL_VERIFY:0:18:DEPTH_ZERO_SELF_SIGNED_CERT NOT_ALL_DOMAINS). AutoSSL will attempt to replace this certificate. 10:55:50 AM WARN The domain "exemplo.com.br" failed domain control validation: The system failed to fetch the DCV file at "http://exemplo.com.br/.well-known/pki-validation/440951B1C5C2C1F62676B2D227FC6D7A.txt" because of an error: The system failed to send an HTTP "GET" request to "http://exemplo.com.br/.well-known/pki-validation/440951B1C5C2C1F62676B2D227FC6D7A.txt" because of an error: Size of response body exceeds the maximum allowed of 16384 .
    0
  • cPanelMichael
    Hello @Thiago Ortega, Are you using any third-party applications such as Engintron on this server? There's a post on the following thread where that was the culprit: AUTO SSL error: size of response body exceeds Thank you.
    0
  • keywaystab
    Hello @Thiago Ortega, Are you using any third-party applications such as Engintron on this server? There's a post on the following thread where that was the culprit: AUTO SSL error: size of response body exceeds Thank you.

    We are also seeing this error for proxy subdomains only; cpanel, webmail webdisk, autodiscover, . No third party applications are loaded. [
    1:28:27 PM WARN The domain "cpanel.example.com" failed domain control validation: The system failed to fetch the DCV file at "http://cpanel.example.com/.well-known/acme-challenge/CRDKH7HU3GXHCVCL6A-V9B78RHX9U8J2" because of an error: The system failed to send an HTTP "GET" request to "http://cpanel.example.com/.well-known/acme-challenge/CRDKH7HU3GXHCVCL6A-V9B78RHX9U8J2" because of an error: Size of response body exceeds the maximum allowed of 16384 .
    0
  • keywaystab
    We are also seeing this error for proxy subdomains only; cpanel, webmail webdisk, autodiscover, . No third party applications are loaded.

    Digging deeper, there is a different error for autodiscover, "400 (Bad Request)":
    6:14:16 PM WARN The domain "cpanel.example.com" failed domain control validation: The system failed to fetch the DCV file at "http://cpanel.example.com/.well-known/acme-challenge/SS4T-NC_516GJC8K4NG705N61H3X0B-E" because of an error: The system failed to send an HTTP "GET" request to "http://cpanel.example.com/.well-known/acme-challenge/SS4T-NC_516GJC8K4NG705N61H3X0B-E" because of an error: Size of response body exceeds the maximum allowed of 16384 . 6:14:17 PM WARN The domain "webmail.example.com" failed domain control validation: The system failed to fetch the DCV file at "http://webmail.example.com/.well-known/acme-challenge/2CH5TATG9-PRI7_DCDQJ6X66-HF7VHKA" because of an error: The system failed to send an HTTP "GET" request to "http://webmail.example.com/.well-known/acme-challenge/2CH5TATG9-PRI7_DCDQJ6X66-HF7VHKA" because of an error: Size of response body exceeds the maximum allowed of 16384 . 6:14:17 PM WARN The domain "webdisk.example.com" failed domain control validation: The system queried for a temporary file at "http://webdisk.example.com/.well-known/acme-challenge/2LOZFVSA0NLBFB2T2Q9WPF23PXJL80G1", but the web server responded with the following error: 401 (Unauthorized). A DNS or web server misconfiguration may exist. 6:14:18 PM WARN The domain "autodiscover.example.com" failed domain control validation: The system queried for a temporary file at "https://cpanelemaildiscovery.cpanel.net/autodiscover/autodiscover.xml", which was redirected from "http://autodiscover.example.com/.well-known/acme-challenge/FQZY6HSMVBEPSFOSL8O5FIXZSVB5DJ6D". The web server responded with the following error: 400 (Bad Request). A DNS or web server misconfiguration may exist.
    It looks like it's probably related to the rewriting of the URL? Possibly in the .htaccess file? Note: I've opened a ticket # 8733879
    0
  • cPanelMichael
    Note: I've opened a ticket # 8733879

    Hello, To update, it looks like this issue stemmed from the use of a custom Apache template file at: /var/cpanel/templates/apache2/main.local Disabling the custom template, and removing the manually created "cpanel" subdomain from the account appears to have fixed the issue. Thank you.
    0
  • 4u123
    Just started getting this today with a few customers receiving notifications. We are not using custom templates. So far three clients have contacted us with this problem today - each time so far the issue has been only with the cpanel subdomain, of which there is no vhost entry, manual subdomain creation or other configuration than the standard DNS entry for the cpanel subdomain.
    The system failed to fetch the DCV (Domain Control Validation) file at "http://cpanel.domain.com/.well-known/pki-validation/599B4DA8EBBE60B19BAF0ACBE61C0281.txt" because of an error: The system failed to send an HTTP (Hypertext Transfer Protocol) "GET" request to "http://cpanel.domain.com/.well-known/pki-validation/599B4DA8EBBE60B19BAF0ACBE61C0281.txt" because of an error: Size of response body exceeds the maximum allowed of 16384
    Checking the user's htaccess file shows nothing that would redirect these requests.
    0
  • cPanelMichael
    Hi @4u123, Could you open a support ticket using the link in my signature so we can take a closer look? Thank you.
    0
  • 4u123
    Many more reports of this issue happening over the last few days. This can't be something unique to our servers. Is there a way to disable AutoSSL notifications to the end user? I wasn't aware these validation messages were getting sent to them anyway. We only want to receive these at the server admin level.
    0
  • cPanelMichael
    Is there a way to disable AutoSSL notifications to the end user? I wasn't aware these validation messages were getting sent to them anyway. We only want to receive these at the server admin level.

    Hello, There's a thread on this topic at: SSL Notifications in cPanel 68 As far as the actual failures, we can take a closer look via a support ticket if you'd like help troubleshooting why the failures are occurring. Thank you.
    0

Please sign in to leave a comment.