AutoSSL errors from cPanel Store API

[Jaison V John]

Hi @cPanelMichael,

    AutoSSL failed to request an SSL certificate for “domain.com” because of an error: Cpanel::Exception::cPStoreError/(XID mvjnxc) The cPanel Store returned an error (X::Item::Validation) in response to the request “POST ssl/certificate/free”: Generic exception
    _disabled

The Auto SSL option is already enabled from the WHM panel from SSL / TLS >> Manage Auto SSL >> cPanel (powered by Comodo) – Current Setting

The SSL option is already enabled for that user account from the Manage Users Tab.

]# cat /usr/local/cpanel/version
11.62.0.15

]# ls -la last
lrwxrwxrwx 1 root root 44 Feb 28 14:10 last -> /var/cpanel/updatelogs/update.1488278427.log

# date
Tue Feb 28 15:47:18 IRST 2017

Any advice on this?

 

[Jaison V John]

Hi,
If anyone else is encountering a similar intricacy, the temporary workaround is to switch to Letsencrypt.

 

[cPanelMichael]

Hello,

Could you let us know the TLD (e.g. .com, .net) of the domain name you notice this AutoSSL error message for?

Thank you.

 

[Jaison V John]

Hi @cPanelMichael,

The problematic domain is using .ir Top Level Domain.

 

[cPanelMichael]

Hello @Jaison V John,

We'll need to review the system to confirm the use of the domain and provide you with some information regarding it's usage. Could you open a support ticket using the link in my signature? You can post the ticket number here so we can ensure it's properly handled.

Thank you.

 

[Jaison V John]

Hi @cPanelMichael,

Sorry for the delay Michael. I was working on this server for one of my client, who is resisting to provide you guys with access to the server.

Anyways, as I mentioned earlier, we do have an alternate solution here using the Let'sEncrypt.
If in any case, that customer changes his mind, I'll provide you with the server access.

I apologize for the inconvenience.

 

[cPanelMichael]

Hello,

The TLD in question is part of Comodo's banned country list:

Banned Country List - Powered by Kayako Help Desk Software

This explains the error message you noticed in the AutoSSL logs. Additionally, technical support for that server would need to be handled through our ticket system so our analysts can ensure ensure compliance with all relevant U.S. export regulations.

Thank you.

 

[Jaison V John]

Hi @cPanelMichael,

Thanks for the clarification.

 

[cPanelMichael]

Hello,

I'd also like to note that internal case CPANEL-11604 is open to determine if there's a more efficient method of handling this issue during the certificate request process. I'll update this thread with more information on the status of this case as it becomes available.

Thank you.