Error installing cPanel-issued SSL for hostname
we are facing an issue with installing cPanel-issued SSL certificate for Hostname. As a result, certificate that is being installed is self-signed and produces security warnings. Here is the part of error log: # /usr/local/cpanel/bin/checkallsslcerts
The system will check for the certificate for the “cpanel” service.
The system will attempt to replace the self-signed certificate for the “cpanel” service with a signed certificate from the “Let’s Encrypt™” provider.
The system will attempt to install a certificate for the “cpanel” service from the system SSL storage.
None of the certificates in the system SSL storage were acceptable to use for the “cpanel” service.
DNS query error (secureservercpl.com/CAA): SERVFAIL (2)
The system will attempt to get a new certificate for the domains: server01.secureservercpl.com, autoconfig.server01.secureservercpl.com, autodiscover.server01.secureservercpl.com, cpanel.server01.secureservercpl.com, cpcalendars.server01.secureservercpl.com, cpcontacts.server01.secureservercpl.com, ipv6.server01.secureservercpl.com, mail.server01.secureservercpl.com, webdisk.server01.secureservercpl.com, webmail.server01.secureservercpl.com, whm.server01.secureservercpl.com, www.server01.secureservercpl.com
The system failed to validate domain control for the domain “autodiscover.server01.secureservercpl.com” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for autodiscover.server01.secureservercpl.com; no valid AAAA records found for autodiscover.server01.secureservercpl.com)
The system failed to validate domain control for the domain “webdisk.server01.secureservercpl.com” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for webdisk.server01.secureservercpl.com; no valid AAAA records found for webdisk.server01.secureservercpl.com)
The system failed to validate domain control for the domain “cpcontacts.server01.secureservercpl.com” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for cpcontacts.server01.secureservercpl.com;no valid AAAA records found for cpcontacts.server01.secureservercpl.com)
The system failed to validate domain control for the domain “server01.secureservercpl.com” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (DNS problem: SERVFAIL looking up CAA for secureservercpl.com - the domain's nameservers may be malfunctioning)
The system failed to validate domain control for the domain “ipv6.server01.secureservercpl.com” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for ipv6.server01.secureservercpl.com; no valid AAAA records found for ipv6.server01.secureservercpl.com)
The system failed to validate domain control for the domain “cpanel.server01.secureservercpl.com” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for cpanel.server01.secureservercpl.com; no valid AAAA records found for cpanel.server01.secureservercpl.com)
The system failed to validate domain control for the domain “mail.server01.secureservercpl.com” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (DNS problem: SERVFAIL looking up CAA for secureservercpl.com - the domain'snameservers may be malfunctioning)
The system failed to validate domain control for the domain “whm.server01.secureservercpl.com” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for whm.server01.secureservercpl.com; no valid AAAArecords found for whm.server01.secureservercpl.com)
The system failed to validate domain control for the domain “cpcalendars.server01.secureservercpl.com” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for cpcalendars.server01.secureservercpl.com; no valid AAAA records found for cpcalendars.server01.secureservercpl.com)
The system failed to validate domain control for the domain “www.server01.secureservercpl.com” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (DNS problem: SERVFAIL looking up CAA for secureservercpl.com - the domain's nameservers may be malfunctioning)
The system failed to validate domain control for the domain “webmail.server01.secureservercpl.com” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for webmail.server01.secureservercpl.com; no valid AAAA records found for webmail.server01.secureservercpl.com)
The system failed to validate domain control for the domain “autoconfig.server01.secureservercpl.com” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for autoconfig.server01.secureservercpl.com;no valid AAAA records found for autoconfig.server01.secureservercpl.com)
Cpanel::SSL::ACME::X::RateLimit=ARRAY(0x4b991e0)
-
Hey there! I'm not seeing anything obviously wrong on my end, although it's best to not include public domains in Forums posts.
If you place a test.txt file in /var/www/html/.well-known/acme-challenge are you able to access that in a browser at your.hostname.com/.well-known/acme-challenge/test.txt?
0 -
I'm having the same issue. Any news?
0 -
Web - are you also able to perform that test I mentioned?
0 -
Yes. I can access to that file
0 -
If you're getting that exact same error as the OP it may be best to create a ticket if you're not seeing anything wrong with the DNS for the domain.
0
Please sign in to leave a comment.
Comments
5 comments