Skip to main content

AUTOSSL fails DCV for no reason

WWWARTSteve
Hi Its great to see that 68.0.14 now allows server wide control of failed AutoSSL checks. This has reduced the number of emails from account holders asking of they should be worried. This has now prompted me to query why I have so many accounts with failed DCV or claims of unresolved ipv4 addresses. I have checked several accounts and note that all domains are valid and resolving. I approached my hosting provider to see if it was a known issue to them, they responded to me that cPanel has a very low timeout value set in its AutoSSL when it waits for a response from the name server to the DNS Queries and flags the query as invalid after the timer expires. Is this correct? If so, what options do I have to improve coverage via autossl? Steve

Comments

6 comments

Date Votes
  • donna o
    This may be the same issue I am experiencing. I have a domain sampledomain.com and www.sampledomain.com that both resolve to the same valid IPv4 address (hosting company). When I check SSL/TLS Status for that account I get AutoSSL Domain Validated for both but got an email after running Run autoSSL to say they "not resolve to any IPv4 addresses on the internet." For the accounts on this server I only have Reseller Owner Access to cPanel and WHM. And the only solution the hosting company have offered is to turn off notifications. I would prefer to understand why it is happening and then take the appropriate action.
    0
  • cPanelMichael
    Hello, We'd need access to an affected system to verify why exactly AutoSSL is failing on the initial validation attempt. Feel free open a support ticket using the link in my signature and we can take a closer look. Thank you.
    0
  • WWWARTSteve
    Hello, We'd need access to an affected system to verify why exactly AutoSSL is failing on the initial validation attempt. Feel free open a support ticket using the link in my signature and we can take a closer look. Thank you.

    Done, Thank you..
    0
  • donna o
    Hi Its great to see that 68.0.14 now allows server wide control of failed AutoSSL checks. This has reduced the number of emails from account holders asking of they should be worried. This has now prompted me to query why I have so many accounts with failed DCV or claims of unresolved ipv4 addresses. I have checked several accounts and note that all domains are valid and resolving. I approached my hosting provider to see if it was a known issue to them, they responded to me that cPanel has a very low timeout value set in its AutoSSL when it waits for a response from the name server to the DNS Queries and flags the query as invalid after the timer expires. Is this correct? If so, what options do I have to improve coverage via autossl? Steve

    Steve was this resolved? If Yes - what was the resolution? We are in the same position and as a reseller cannot get access to logs or settings. Thanks Cpanel: 68.0 (build 19)
    0
  • cPanelMichael
    We are in the same position and as a reseller cannot get access to logs or settings.

    Please have your web hosting provider reach out to us via a support ticket if they would like us to take a closer look. Thank you.
    0
  • WWWARTSteve
    Steve was this resolved? If Yes - what was the resolution? We are in the same position and as a reseller cannot get access to logs or settings. Thanks Cpanel: 68.0 (build 19)

    Donna the data centre used for this box has a DNS configuration that isn't working well with AutoSSL I would take cPanelMichael up on his offer to have support look at it with your provider
    0

Please sign in to leave a comment.

Didn't find what you were looking for?

New post