accessing WHM is not secure any more

I followed the info here https://support.cpanel.net/hc/en-us/articles/360055612073-How-to-generate-a-free-signed-hostname-certificate but still same issue. I tried to submit support request to cpanel as I usually do, but now it says that ovh is responsible for cpanel support of my IP.

This is what I get (domain name replaced with xxx:

# /usr/local/cpanel/bin/checkallsslcerts
The system will check for the certificate for the “cpanel” service.
The system will attempt to replace the self-signed certificate for the “cpanel” service with a signed certificate from the “Let’s Encrypt™” provider.
The system will attempt to install a certificate for the “cpanel” service from the system SSL storage.
None of the certificates in the system SSL storage were acceptable to use for the “cpanel” service.
The system will attempt to get a new certificate for the domains: host.xxx.gr, autoconfig.host.xxx.gr, autodiscover.host.xxx.gr, cpanel.host.xxx.gr, cpcalendars.host.xxx.gr, cpcontacts.host.xxx.gr, ipv6.host.xxx.gr, mail.host.xxx.gr, webdisk.host.xxx.gr, webmail.host.xxx.gr, whm.host.xxx.gr, www.host.xxx.gr
The system failed to validate domain control for the domain “mail.host.xxx.gr” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for mail.host.xxx.gr; no valid AAAA records found for mail.host.xxx.gr)
The system failed to validate domain control for the domain “webdisk.host.xxx.gr” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for webdisk.host.xxx.gr; no valid AAAA records found for webdisk.host.xxx.gr)
The system failed to validate domain control for the domain “autoconfig.host.xxx.gr” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for autoconfig.host.xxx.gr; no valid AAAA records found for autoconfig.host.xxx.gr)
The system failed to validate domain control for the domain “ipv6.host.xxx.gr” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for ipv6.host.xxx.gr; no valid AAAA records found for ipv6.host.xxx.gr)
The system failed to validate domain control for the domain “www.host.xxx.gr” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for www.host.xxx.gr; no valid AAAA records found for www.host.xxx.gr)
The system failed to validate domain control for the domain “whm.host.xxx.gr” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for whm.host.xxx.gr; no valid AAAA records found for whm.host.xxx.gr)
The system failed to validate domain control for the domain “webmail.host.xxx.gr” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for webmail.host.xxx.gr; no valid AAAA records found for webmail.host.xxx.gr)
The system failed to validate domain control for the domain “cpanel.host.xxx.gr” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for cpanel.host.xxx.gr; no valid AAAA records found for cpanel.host.xxx.gr)
The system failed to validate domain control for the domain “cpcalendars.host.xxx.gr” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for cpcalendars.host.xxx.gr; no valid AAAA records found for cpcalendars.host.xxx.gr)
The system failed to validate domain control for the domain “autodiscover.host.xxx.gr” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for autodiscover.host.xxx.gr; no valid AAAA records found for autodiscover.host.xxx.gr)
The system failed to validate domain control for the domain “cpcontacts.host.xxx.gr” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (no valid A records found for cpcontacts.host.xxx.gr; no valid AAAA records found for cpcontacts.host.xxx.gr)
The system failed to validate domain control for the domain “host.xxx.gr” using the “HTTP” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (During secondary validation: DNS problem: query timed out looking up A for host.xxx.gr; DNS problem: SERVFAIL looking up AAAA for host.xxx.gr - the domain's nameservers may be malfunctioning)
The system failed to validate domain control for the domain “www.host.xxx.gr” using the “DNS” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (During secondary validation: DNS problem: query timed out looking up TXT for _acme-challenge.www.host.xxx.gr)
The system failed to validate domain control for the domain “autodiscover.host.xxx.gr” using the “DNS” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (During secondary validation: DNS problem: query timed out looking up TXT for _acme-challenge.autodiscover.host.xxx.gr)
The system failed to validate domain control for the domain “webdisk.host.xxx.gr” using the “DNS” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (During secondary validation: DNS problem: query timed out looking up TXT for _acme-challenge.webdisk.host.xxx.gr)
The system failed to validate domain control for the domain “mail.host.xxx.gr” using the “DNS” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (During secondary validation: DNS problem: query timed out looking up TXT for _acme-challenge.mail.host.xxx.gr)
The system failed to validate domain control for the domain “host.xxx.gr” using the “DNS” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (During secondary validation: DNS problem: query timed out looking up TXT for _acme-challenge.host.xxx.gr)
The system failed to validate domain control for the domain “autoconfig.host.xxx.gr” using the “DNS” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (During secondary validation: DNS problem: query timed out looking up TXT for _acme-challenge.autoconfig.host.xxx.gr)
The system failed to validate domain control for the domain “cpcontacts.host.xxx.gr” using the “DNS” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (During secondary validation: DNS problem: query timed out looking up TXT for _acme-challenge.cpcontacts.host.xxx.gr)
The system failed to validate domain control for the domain “webmail.host.xxx.gr” using the “DNS” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (During secondary validation: DNS problem: query timed out looking up TXT for _acme-challenge.webmail.host.xxx.gr)
The system failed to validate domain control for the domain “ipv6.host.xxx.gr” using the “DNS” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (During secondary validation: DNS problem: query timed out looking up TXT for _acme-challenge.ipv6.host.xxx.gr)
The system failed to validate domain control for the domain “cpanel.host.xxx.gr” using the “DNS” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (During secondary validation: DNS problem: query timed out looking up TXT for _acme-challenge.cpanel.host.xxx.gr)
The system failed to validate domain control for the domain “whm.host.xxx.gr” using the “DNS” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (During secondary validation: DNS problem: query timed out looking up TXT for _acme-challenge.whm.host.xxx.gr)
The system failed to validate domain control for the domain “cpcalendars.host.xxx.gr” using the “DNS” DCV method: 400 urn:ietf:params:acme:error:dns (There was a problem with a DNS query) (During secondary validation: DNS problem: query timed out looking up TXT for _acme-challenge.cpcalendars.host.xxx.gr)
“host.xxx.gr” failed DCV. Cannot proceed.

cPRex Jurassic Moderator

May 17, 2024 14:15

Hey there! If you scan your domain with a tool like intodns.com, do you see any errors for your domain.com? If there are *any* DNS errors AutoSSL will not be able to issue the certificate.

greektranslator

May 20, 2024 07:38

I get Same Glue error. The parent is different from nameservers it says. But I have made no changes whatsoever and it had been working fine so far.

May 20, 2024 12:51

It doesn't matter if you haven't made any changes - *something* in the DNS for the domain has changed, possibly at the registrar level. Can you look into that a bit more?

May 20, 2024 13:04

Thanks, at registrar-level there are only 2 entries for ns1... and ns2... for the main domain (the one used to log in to WHM via host.[domain.name])

May 20, 2024 13:05

That sounds right, but the lack of glue record could indicate the nameservers aren't properly configured where they are registered.

May 20, 2024 15:01
Edited

Reply from registrar:

The Nameservers are correctly registered in the Domain Name Registry. The issue seems to arise due to a Glue mismatch between the Registry and the A records on your DNS servers, resulting in the latter returning only the IP: 176.31.xxx.xxx, which you can also confirm here: https://network-tools .webwiz.net/dns-report.htm . In addition, if you think that the DNS records have been correctly passed to your Server, please check if there is any relevant record in the Hosts.

I checked the A record in DNS Zone Manager and changed the ns2 IP so it is the same as ns1 IP. Is this what I should do? The same issue persists.

May 20, 2024 15:02

Yes, it sounds like that is what you should do, but it may take a few hours for DNS propagation to update before any online tools will see the change.

accessing WHM is not secure any more

Comments

Didn't find what you were looking for?