1 service generated warnings while checking SSL certificates

philbean

Member
Jul 14, 2020
16
2
3
UK
cPanel Access Level
Root Administrator
Had this email from WHM a few times now.

Code:
The system failed to acquire a signed certificate from the cPanel Store because of the following error: (XID pnkkfw) The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request “POST ssl/certificate/whm-license/90-day”: We were unable to process your request. Please try again later.
Checking the AutoSSL log in WHM gives..

Code:
Log for the AutoSSL run for “MYDOMAIN”: Tuesday, August 16, 2022 9:22:22 AM GMT+0100 (cPanel (powered by Sectigo))
9:22:22 AM AutoSSL’s configured provider is “cPanel (powered by Sectigo)”.
This AutoSSL provider does not poll for certificate availability immediately after a certificate request submission. Instead, it submits certificate requests then periodically polls the cPanel Store for each requested certificate and installs it after a successful retrieval. The system will record all requests, retrievals, and installations for the current AutoSSL run in this log.
9:22:23 AM Analyzing “MYDOMAIN”’s domains …
9:22:23 AM Analyzing “MYDOMAIN.com” (website) …
9:22:23 AM TLS Status: Ready for Renewal
WARN Certificate expiry: 8/23/22, 12:00 AM UTC (6.65 days from now)    *******
9:22:23 AM Attempting to ensure the existence of necessary CAA records …
9:22:23 AM No CAA records were created.
9:22:23 AM Verifying 8 domains’ management status …
Verifying “cPanel (powered by Sectigo)”’s authorization on 8 domains via DNS CAA records …
..For one of the sites on my server.
the starred line is the only 'caution' line.
All other sites on the server are OK


I've checked the SSL Status in cPanel for the site in question and all parts are green and say

Code:
AutoSSL Domain Validated
Expires on November 14, 2022. The certificate will renew via AutoSSL.

I'm no expert in this.

When does my SSL cert expire on this site? in 6 days as WHM is saying or in 3 months as cPanel is saying ?



I tried running /usr/local/cpanel/bin/checkallsslcerts as suggested in other threads but this didn't seem to do anything (in WHM at least. I did it BEFORE I checked the SSL status in cPanel)
 

kgs

Well-Known Member
Dec 15, 2020
50
5
8
USA
cPanel Access Level
Root Administrator
Hey @cPRex, I've been getting this email a couple of times now, too. My WHM cert is currently valid from Fri, 17 Jun 2022 to Thu, 15 Sep 2022.

SUBJECT: ⚠ 1 service generated warnings while checking SSL certificates.

The system failed to acquire a signed certificate from the cPanel Store because of the following error: (XID mrskue) The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request “POST ssl/certificate/whm-license/90-day”: We were unable to process your request. Please try again later.
Anything I should do?

Thanks!
 

whipworks

Well-Known Member
Aug 19, 2014
194
11
68
cPanel Access Level
Reseller Owner
Hi Rex,

Our server is also getting this warning. I check that the cert is going to expire in a couple of weeks. I honestly don't recall how we got it or where we got it. Is this something that we buy through CPanel? I'm guessing this is something important that needs to be addressed.

How do we proceed on renewing this if ever?
 

whipworks

Well-Known Member
Aug 19, 2014
194
11
68
cPanel Access Level
Reseller Owner
Thanks @cPRex!

I think the problem why the warning goes up is the word "temporarily available" on the warning message. Clearly there's something wrong with the shop the would trigger or generate the error. Is that something that CPanel is trying to fix?
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
12,498
1,970
363
cPanel Access Level
Root Administrator
When you get the "temporarily unavailable" error that means our SSL provider is having network issues. There isn't anything we can do on our side for that specific error, but we are looking into options for the future to help avoid that.
 

Wild Duck

Registered
May 3, 2020
1
0
1
Netherlands
cPanel Access Level
Root Administrator
I'm also getting this error for 5 certs for over a week now, cert will expire September 28.

" we are looking into options for the future to help avoid that "

So I was googling for this error, and this has been going on for years now whenever there's a "network issue"? For such an expensive product, I expect cPanel to look into it better and faster. So instead of your customers worrying, you take care of it. That's what I pay for.