SSL on WHM/Cpanel stoped working

[kamau]

I no longer cannot access WHM via https://domain-host:2087

And can only use http://domain-host:2086

Last thing we did was to do a symbolic link of two folders into /home/ folder, ie. /usr/local now has symlink pointed to /home/usr/local/ & second one /usr/share symlink pointing to /home/usr/share

We were trying to get some space for /usr partition, be'se it was 82% used and these two folders looked logical to do symlinks into /home folder like we do with our Cobalt servers.

Could this be the problem?? any ideas??

cPanel.net Support Ticket Number:

[DWHS.net]

It happened to us to, but only on one server.

Cpanel didn't even update which might of explained it.

I rebooted apache and did the dns fix script to make it work again.

No changes to the server either just out of no where ssl failed.

Strange stuff.

cPanel.net Support Ticket Number:

[purplepaws]

Same here. Restart of Apache cleared the problem on one server, other servers were not affected.

I got a bit hot under the collar as we were doing some work on the server last night, and I thought we had broken something!



cPanel.net Support Ticket Number:

[cass]

If you get any problem with 2087/2083/2096 SSL...
you can just try to :
1) Delete /usr/local/cpanel/etc/*.pem
2) Goto WHM and do a "Reset WHM/Cpanel cert" this will create the cert again
3) do a : /etc/rc.d/init.d/cpanel restart

it should work.
I have same problem a while ago ...
also the reset cert was not overwriting the old cert, so I needed to manually delete it ...

Regards.

cPanel.net Support Ticket Number:

[purplepaws]

This didnt just happen on the WHM SSL to us, it happened on several domains SSL too.

cPanel.net Support Ticket Number:

[DWHS.net]

I got a bit hot under the collar

What timing, lucky apache (restart) fixed it I was about pull out the works to fix it too.

if this is the worst that we get for a while I will be a happy admin.

-Charles

cPanel.net Support Ticket Number:

[kamau]

If you get any problem with 2087/2083/2096 SSL...
you can just try to :
1) Delete /usr/local/cpanel/etc/*.pem
2) Goto WHM and do a "Reset WHM/Cpanel cert" this will create the cert again
3) do a : /etc/rc.d/init.d/cpanel restart

Thanks!! & I've TRIED the above, but still problem is not gone. still cannot load WHM/Cpanel via SSL on any of the above three ports

I deleted *.pem in above folder & when I go to WHM and type the machine host domain-host.com and click on fecth it, it brings up the certificates on screen and now when I click "Do it" it generated one *.pem file, ie. mycpanel.pem and does not generate cpanel.pem

Also if I try to install SSL for WHM by going to "Install an SSL certificate .... for a domain.." at WHM I have a problem where by if I type in the host-name for the machine, then IP# what user should I type in, be'se when I type user as; root and click "do it" I get user does not exist.

So when you say in (2) above go to WHM and reset WHM/Cpanel cert, which part of the WHM menu option does one use?? is it the "change cpanel/WHM cert..." or Install an SSL certificate and setup domain..."

Lastly, my assumption is you also have your /usr/local and /usr/share both folders moved and symlinked to /home/usr/local & /home/usr/share respectively, right??

thanks again & looking forward for more hints to resolve this troubles...

cPanel.net Support Ticket Number:

[cass]

Did you do :
/etc/rc.d/init.d/cpanel3 restart ?

Check that you see an "OK" right to the "SSL Services"... ie:
Starting Cpanel7 services: [ OK ]
Starting WebMail services: [ OK ]
Starting pop3 services: [ OK ]
Starting Cpanel7 Chat services: [ OK ]
Starting Melange Chat services:
Starting Cpanel7 ssl services: [ OK ]
Starting Web Host Manager services: [ OK ]


.... oh also...
do you have the ports open right?
if you have a firewall, check the port is listening and not blocked.
try :
lsof | grep 2087

you should see something like :
stunnel-4 1129 root 7u IPv4 76786663 TCP *:2087 (LISTEN)
stunnel-4 28893 root 7u IPv4 76786663 TCP *:2087 (LISTEN)

Regards.

[kamau]

Thanks Cass!

I did

/etc/rc.d/init.d/cpanel3 restart ?

And got ok....

Check that you see an "OK" right to the "SSL Services"... ie:
Starting Cpanel7 services: [ OK ]
Starting WebMail services: [ OK ]
Starting pop3 services: [ OK ]
Starting Cpanel7 Chat services: [ OK ]
Starting Melange Chat services:
Starting Cpanel7 ssl services: [ OK ]
Starting Web Host Manager services: [ OK ]

BUT when I do

lsof | grep 2087

I get a blank and no error ie. after I presss return, but if I do the same for port 2086 or 2082 I get the LISTEN reply line similar to what you have.

What do you think/advice??

cPanel.net Support Ticket Number:

[kamau]

Just to let everyone finally we resolved this issue by re-starting stunnel mannually or from command line, ie. /usr/local/cpanel/startstunnel

& all https:// ports worked again, thanks for all your tips/ideas...

cPanel.net Support Ticket Number:

[elor]

Just a quick note. After plowing through these steps above a few times and not seeing the problem I had. I remembered that browsers can cache certs if you tell them to and won't let you back in if you've changed your server cert. So,

If your browser is on a Mac, or you're using AOL ( netscape/mozilla). Goto preferences-security-certificates-manage certificates. Scroll down until you see anything familiar then delete it. In IE, it's internet options-content-certificates.

sometimes it's the simple things....

cPanel.net Support Ticket Number:

[bennet]

Very good! Here it also worked, besides it increased it period of expiration of the certificate.

Thank you

cPanel.net Support Ticket Number:

[ricu5]

Hello
I tried everything above..still no ssl access to cpanel...
ssl works on everything else though
heres an error using curl from com line
all ports are open firewall is off
curl https://**.***.**.**/ without specifying port 2087,2096,2083
returns this
curl: (35) SSL: error:140770FC:SSL routines:SSL23_GET_SERVER_HELLO:unknown protocol

curl https://**.***.**.**:2087 or 2083 or 2096
returns this
curl: (7) Connect failed


Rich

cPanel.net Support Ticket Number:

[ricu5]

Hello
I just upgraded to edge 145..I dont usually use edge..
but the problem went away..
Thanks

cPanel.net Support Ticket Number:

[poppyq]

When I run Reset cPanel/WHM Certificate from WHM it uses information such as GB for the country, Berkshire for the City and such instead of information pertaining to my server, where do I fix this so that it uses the correct info (including hostname)

cPanel.net Support Ticket Number: