Missing Hosts From Autossl => Cert Errors
Hi,
I've got a strange problem with autossl.
An account has 2 add on domains (3 in total)
The primary domain has expired. It's still there because there is no way to promote another domain to be primary (it's been decades now!)
Addon domain 1 has all the expected hostnames in autossl (autoconfig, autodiscover, cpanel, cpcontacts, cpcalendars, mail, webmail, webdisk, www) . Autossl creates a certificate for domain and *.domain and all works
Addon domain 2 has only mail & www in its config despite all the other names exisiting in dns. When it runs its creates a cert explicitly for those names rather than a wildcard as instructed (ie domain, mail.domain, www.domain).
The problem is users on domain 2 are getting cert errors from mail setups (autoconfig) and webmail.
I cannot find any reason why autossl only has mail & www for domain 2. I cannot find any way to include them. /usr/local/cpanel/bin/autossl_check show excluded domains for the expired primary domain as expected.
How to I update the autossl so that it includes all the other hostnames for the domain?
-
Hey there! I've got a couple thoughts for you, and you'll really like the first one.
We've added the ability to change the primary domain in version 138! https://features.cpanel.net/c/228-replace-primary-domain
I'm wondering if the best option is to use that new tool to promote one of the other domains to the primary domain and then see if that resolves the issue, as you may be reaching the limit of domains for the vhost.
One other thing you can check would be the AutoSSL logs in WHM >> Manage AutoSSL to see if there are any errors listed there. You can also use the "Manage Users" tab on that page to run a manual check, which should show odd behavior.
0 -
Hi cPRex,
We've added the ability to change the primary domain in version 138! https://features.cpanel.net/c/228-replace-primary-domain
oh that is good news. I'm still on 136. I seem to have clients rebrand with annoying regularity
One other thing you can check would be the AutoSSL logs in WHM >> Manage AutoSSL to see if there are any errors listed there. You can also use the "Manage Users" tab on that page to run a manual check, which should show odd behavior.
other than the expected failure to process alert for the primary domain, there is no errors. It successfully secures all the domains in its list, it's just that the second domain only has mail & www listed?
I can see from the autossl emails the list dropped to those 3 after a migration to another host in 2024. autossl simply believes there are only 3 to secure and thats all it does.
Is there some way to reinitialise a domain in autossl?
0 -
There isn't a "reinitialize" feature - if the domains are present on the server they should at least attempt to be secured by the AutoSSL system.
Are there vhosts in Apache for all those other domains that are missing? I'd check the configuration file (/etc/apache2/conf/httpd.conf) to see if they are there.
If they are, it might be best to create a ticket since that's just odd behavior.
0
Please sign in to leave a comment.
Comments
3 comments