AutoSSL fail for cPanel virtual domains (webmail, webdisk etc.)

[maudam]

Hi all,

having troubles with autossl / sectigo.

I have 10 domains on a server. Some domains have dns server on the same host, while other domains have dns servers on customer's provider.

For these some entries on dns zone where created:
example.com
www.example.com
webmail.example.com
etc..

When autossl run for these domains, it try with DNS DCV and fail 'cause it can't use DNS so fallback to HTTP DCV but for some URLs it return errors.

On domains like example.com or www.example.com everything is right and certificates are released.
For virtual domains like webmail.example.com, webdisk.example.com autossl fail with error:

DNS DCV: No local authority: “webmail.example.com”; HTTP DCV: “cPanel (powered by Sectigo)” forbids DCV HTTP redirections

Autossl telling that it can't proceed with DNS DVC and HTTP DCV fail due to redirection.

How can i set things in order to receive certificates for these URLs ?



Thanks

 

[cPanelAnthony]

Hello! Does this article help? It sounds like an AutoSSL issues that occurs on nginx.

 

[iNiC]

Hello! Does this article help? It sounds like an AutoSSL issues that occurs on nginx.

That "article" is a DEAD link already. Do you have one that fits the latest cpanel error below?
::
DNS DCV: The DNS query to “_cpanel-dcv-test-record.domainname.tld” for the DCV challenge returned no “TXT” record that matches the value “_cpanel-dcv-test-
::
and
::
HTTP DCV: “webdisk.domainname.tld” does not resolve to any IP addresses on the internet.
::

I have some 60+ clients on a shared IP.

Thanks
~i
p.s. The other articles are similar, and close, but don't compare.

 

[DennisMidjord]

@iNiC both of those warnings mean that the DNS records doesn't exist. In the first example, a TXT record for _cpanel-dcv-test-record.domainname.tld is missing.
In the second example, there's no A or AAAA records for webdisk.domainname.tld.