Skip to main content

SSL certificate expiry notice... will expire in less than 30 day

Comments

16 comments

  • coffeeboyuk

    This problem seem to resolved itself. I went to reboot the server after some time to see if it takes ages for status to update  and Server Status all says it's "up".

    0
  • cPRex Jurassic Moderator

    Hey there!  It's normal for Service Status to take a few minutes for things to show up after a reboot.  In fact, there is specifically a delay after a reboot so it doesn't detect things as down and restart them unnecessarily.

    As for the SSL renewal, it will happen automatically when there are two days left on the current certificate, so you can just ignore those warnings.

    0
  • coffeeboyuk

    Hi,

     

    I notice when I went to check the certificate today at "Manage Service SSL Certificates" and the expiry date has reverted back to 9/5/24 from 2025, why did it do that?

    Also, for SSL certificate to renew automatically, should "Configure AutoSSL for Users on the Server" be set to "Manage AutoSSL?" because currently it is set to "Reset to Feature List Setting?"

     

    Kind regards,

     

    Leon

     

     

    0
  • coffeeboyuk

    By the way, it looks like 9/5/24 is the american standard date and just want to check the certificate for server host from the web browser and it is 05/09/2024 (Thu, 05 Sep 2024 14:09:44 GMT), but I'm still a little baffled that I'm sure I saw the year date of 2025?

    0
  • cPRex Jurassic Moderator

    The new hostname certificates are issued for three months, so that seems like a normal expiration date at this time.

    That setting for the users is fine also.

    0
  • coffeeboyuk

    Thanks for the prompt reply. It's reassuring to know.

    Something for CPANEL team to consider: Prehaps it might be wise to add in these email notifications that the certificate will automatically renew when there is two days left, because it gives the impression I have to manually go in and renew it. If I read that, I wouldn't go in manually renewed it myself. Maybe also add that, I can manually renew it at my convenience before expiry.

     

    Kind regards,

     

    Leon

    1
  • cPRex Jurassic Moderator

    I believe it does say that near the bottom of the email notification - something like "If this certificate remains installed on Nov 25, 2021, the system will attempt to replace it."

    1
  • bayden10

    coffeeboyuk I agree, and 2 days for host services renewal is a bit tight if something was to go sideways.

    Jim

    System email indicates manual cert install as soon as possible, nothing about will auto renew in number of days.
    (AlmaLinux v8.10.0 - cP v120.0.9)

     

    0
  • cPRex Jurassic Moderator

    Interesting - let me look into this a bit and I'll get you some more details soon.

    0
  • cPRex Jurassic Moderator

    I created case CPANEL-45617 so our developers can look into that wording and hopefully get that updated so it's less scary and less confusing in the future - thanks for bringing this up!

    2
  • Fahad Adnan

    I have the same issue the Manage Service SSL Certificates not renew and it's say will expire on 6/16/24, how to resolve this issue?

    Issuer: Let's Encrypt
    Key Size: 2048
    Expires: Sunday, June 16, 2024 at 12:03:27 PM UTC
    0
  • cPRex Jurassic Moderator

    They'll renew when it gets closer to the expiration.

    0
  • Enrique Delavau

    Hi there, i was going to create a new post but this already has the same issue i have...
    The SSL certificate for “exim” will exipre soon...

    Is there anyway to force renew these? Renewing two days before expiring doesnt look so good in case something happen.....

    0
  • cPRex Jurassic Moderator

    Sure - you can visit WHM >> Manage Service SSL Certificates, reset each one, and then run "/usr/local/cpanel/bin/checkallsslcerts" to force a renewal.

    0
  • splaquet

    I operate a handful of cPanel servers, so these new emails land in bulk and are REALLY annoying!


    I’d previously used the LetsEncrypt plugin for WHM & cPanel before cPanel offered their official integration.

    I believe it renewed certificates after 60 days, leaving a long grace period and preventing these annoying emails to myself and clients.

    Services or cPanel level, I never received any warnings that any certificates were expiring, unless they were actually in danger of expiring.

    IMO, their cPanel plugin was MUCH more intuitive than cPanel’s new offering. It was very clear on how you’d create individual certificates in any combination, or DNS for Wildcard certs.

    Everything “works”, but could be much better. Since they deprecated their cPanel plugin and stopped development, maybe integrate some of what they had into your new solution?

    0
  • cPRex Jurassic Moderator

    splaquet - I do have request CPANEL-45617 open to make the renewal notifications less confusing, and I'm hoping that helps.  I'm also working to get the renewal time extended so they new sooner.

    2

Please sign in to leave a comment.