AutoSSL Could not connect to 'store.cpanel.net:443'

cbrrbc

Registered
Jul 6, 2021
2
0
1
Athens
cPanel Access Level
Root Administrator
Good evening all!

Issue: Installed AutoSSL to domain, but I receive: NET::ERR_CERT_INVALID when I access the url

Logs:
ERROR AutoSSL failed to request an SSL certificate for “(mydomain).(mymaindomain)” because of an error: (XID 4skdnz) The system failed to send an HTTP (Hypertext Transfer Protocol) “POST” request to “https://store.cpanel.net/json-api/ssl/certificate/free” because of an error: Could not connect to 'store.cpanel.net:443': Name or service not known

Also I get the following errors in the logs - but I guess these are normal (???):
a. ERROR TLS Status: Defective
b. Defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL’s verification (0:18:DEPTH_ZERO_SELF_SIGNED_CERT).

Questions:
1. Is this normal that the cpanel constructs a certificate as a subdomain of the main domain?
eg. main domain: www.test.com
new domain for the same user: www.thessl.com
then the certificate is being created for the thessl.test.com
2. Firewall doesn't have any rule yet.
3. Any ideas or anything that I could share more with you?

Thank you for the understanding I'm a noobie.
 
Last edited:

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
6,923
912
313
cPanel Access Level
Root Administrator
Hey there!

Yes, AutoSSL will try and issue a certificate to every domain that is configured on the system. This includes subdomains and aliases configured in Apache. In your case, it seems like the system is not able to reach out store. If you just type this in on the server's command line, does it download the index.html page?

Code:
wget https://store.cpanel.net
That would confirm that your server is able to connect to the cPanel store. If that connection isn't working there is likely a firewall rule either on your system or outside of your server that is blocking this connection.
 
  • Like
Reactions: cbrrbc