AutoSSL and WHMCS Slow Loading Time

m4f1aboy

Member
Feb 5, 2015
11
3
3
cPanel Access Level
Root Administrator
I recently had a rapidSSL cert expired and decided to use the autossl feature within cPanel and had it install on a domain that has WHMCS installed. When trying to access the SSL or the admin panel, it is very slow and typically times out.

The following is the output from the apache error log:

[Thu May 18 02:50:22.995612 2017] [ssl:error] [pid 2628] (101)Network is unreachable: [client x.x.x.x:50975] AH01974: could not connect to OCSP responder 'ocsp.comodoca.com'
[Thu May 18 02:50:22.995659 2017] [ssl:error] [pid 2628] AH01941: stapling_renew_response: responder error
x.x.x.x being my IP address. Other websites that have autoSSL installed are not having this issue.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,218
463
Hello,

Do you notice any slowness or connectivity issues when attempting to connect to ocsp.comodoca.com from this system? You can test the connection with a command such as this:

Code:
traceroute -I ocsp.comodoca.com
Thank you.
 

m4f1aboy

Member
Feb 5, 2015
11
3
3
cPanel Access Level
Root Administrator
Output from traceroute:
1 * * *
2 * * *
3 * * *
4 * * *
5 * * *
6 100.65.10.33 (100.65.10.33) 0.397 ms 0.321 ms 0.322 ms
7 205.251.244.196 (205.251.244.196) 1.036 ms 0.976 ms 1.020 ms
8 54.239.111.24 (54.239.111.24) 16.547 ms 11.585 ms 16.866 ms
9 54.239.108.173 (54.239.108.173) 1.178 ms 1.137 ms 1.118 ms
10 ae13.cr4-was1.ip4.gtt.net (173.205.43.221) 1.159 ms 1.295 ms 1.364 ms
11 et-7-1-0.cr1-nyc4.ip4.gtt.net (89.149.185.193) 6.773 ms 6.798 ms 6.791 ms
12 comodo-group-gw.ip4.gtt.net (173.241.128.178) 6.833 ms 6.844 ms 6.831 ms
13 ocsp.comodoca.com (178.255.83.1) 7.153 ms 7.174 ms 7.174 ms
I also did a continuous ping from that server and it is a solid 7 ms with little fluctuation. When I install a non-cpanel SSL everything works fine.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,218
463
Hello,

Feel free to open a support ticket using the link in my signature if you'd like us to take a closer look. You can post the ticket number here so we can update this thread with the outcome.

Thank you.