1 service generated warnings while checking SSL certificates

[philbean]

Had this email from WHM a few times now.

The system failed to acquire a signed certificate from the cPanel Store because of the following error: (XID pnkkfw) The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request “POST ssl/certificate/whm-license/90-day”: We were unable to process your request. Please try again later.

Checking the AutoSSL log in WHM gives..

Log for the AutoSSL run for “MYDOMAIN”: Tuesday, August 16, 2022 9:22:22 AM GMT+0100 (cPanel (powered by Sectigo))
9:22:22 AM AutoSSL’s configured provider is “cPanel (powered by Sectigo)”.
This AutoSSL provider does not poll for certificate availability immediately after a certificate request submission. Instead, it submits certificate requests then periodically polls the cPanel Store for each requested certificate and installs it after a successful retrieval. The system will record all requests, retrievals, and installations for the current AutoSSL run in this log.
9:22:23 AM Analyzing “MYDOMAIN”’s domains …
9:22:23 AM Analyzing “MYDOMAIN.com” (website) …
9:22:23 AM TLS Status: Ready for Renewal
WARN Certificate expiry: 8/23/22, 12:00 AM UTC (6.65 days from now)    *******
9:22:23 AM Attempting to ensure the existence of necessary CAA records …
9:22:23 AM No CAA records were created.
9:22:23 AM Verifying 8 domains’ management status …
Verifying “cPanel (powered by Sectigo)”’s authorization on 8 domains via DNS CAA records …

..For one of the sites on my server.
the starred line is the only 'caution' line.
All other sites on the server are OK


I've checked the SSL Status in cPanel for the site in question and all parts are green and say

AutoSSL Domain Validated
Expires on November 14, 2022. The certificate will renew via AutoSSL.

I'm no expert in this.

When does my SSL cert expire on this site? in 6 days as WHM is saying or in 3 months as cPanel is saying ?



I tried running /usr/local/cpanel/bin/checkallsslcerts as suggested in other threads but this didn't seem to do anything (in WHM at least. I did it BEFORE I checked the SSL status in cPanel)

 

[cPRex]

Hey there! The best answer would be to check the certificate in a browser. What does the expiration there show for the WHM certificate?

 

[kgs]

Hey @cPRex, I've been getting this email a couple of times now, too. My WHM cert is currently valid from Fri, 17 Jun 2022 to Thu, 15 Sep 2022.

SUBJECT: 1 service generated warnings while checking SSL certificates.

The system failed to acquire a signed certificate from the cPanel Store because of the following error: (XID mrskue) The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request “POST ssl/certificate/whm-license/90-day”: We were unable to process your request. Please try again later.

Anything I should do?

Thanks!

 

[cPRex]

Nah, since you still have a few weeks, I wouldn't worry about it. It will have many opportunities to retry.

 

[whipworks]

Hi Rex,

Our server is also getting this warning. I check that the cert is going to expire in a couple of weeks. I honestly don't recall how we got it or where we got it. Is this something that we buy through CPanel? I'm guessing this is something important that needs to be addressed.

How do we proceed on renewing this if ever?

 

[cPRex]

@whipworks - the SSL is free as part of your cPanel license. It will renew automatically as the expiration date gets closer.

 

[whipworks]

Thanks @cPRex!

I think the problem why the warning goes up is the word "temporarily available" on the warning message. Clearly there's something wrong with the shop the would trigger or generate the error. Is that something that CPanel is trying to fix?

 

[cPRex]

When you get the "temporarily unavailable" error that means our SSL provider is having network issues. There isn't anything we can do on our side for that specific error, but we are looking into options for the future to help avoid that.

 

[Wild Duck]

I'm also getting this error for 5 certs for over a week now, cert will expire September 28.

" we are looking into options for the future to help avoid that "

So I was googling for this error, and this has been going on for years now whenever there's a "network issue"? For such an expensive product, I expect cPanel to look into it better and faster. So instead of your customers worrying, you take care of it. That's what I pay for.

 

[cPRex]

@Wild Duck - if the expiration date gets too close for comfort, please submit a ticket to our team so we can check it out.