SOLVED AutoSSL issue, not working on browsers

[gfserver]

Hello,

When is added a new domain or subdomain in my cPanel / WHM VPS, the AutoSSL ( cPanel (powered by Sectigo) the SSL certificated is succesfully generated but when we open the https:// URL in browsers it is showing "not secure" site even after 24 hours.

We check auto SSL log and it's ok, for example:


[B]Log for the AutoSSL run for “user”: Wednesday, September 22, 2021 2:08:53 PM GMT-0400 (cPanel (powered by Sectigo)) [/B]

2:08:53 PM AutoSSL’s configured provider is “cPanel (powered by Sectigo)”.
This AutoSSL provider does not poll for certificate availability immediately after a certificate request submission. Instead, it submits certificate requests then periodically polls the cPanel Store for each requested certificate and installs it after a successful retrieval. The system will record all requests, retrievals, and installations for the current AutoSSL run in this log.
Analyzing “user”’s domains …
2:08:53 PM Analyzing “subdomain.domain.com” (website) …
2:08:53 PM SUCCESS TLS Status: OK
Certificate expiry: 12/22/21, 12:00 AM UTC (90.24 days from now)
2:08:53 PM Analyzing “domain.com” (website) …
2:08:53 PM SUCCESS TLS Status: OK
Certificate expiry: 12/9/21, 12:00 AM UTC (77.24 days from now)
2:08:53 PM SUCCESS This user’s SSL coverage is already optimal.


Running in SSH "/usr/local/cpanel/bin/autossl_check --user username" output:


AutoSSL’s configured provider is “cPanel (powered by Sectigo)”.
This AutoSSL provider does not poll for certificate availability immediately after a certificate request submission. Instead, it submits certificate requests then periodically polls the cPanel Store for each requested certificate and installs it after a successful retrieval. The system will record all requests, retrievals, and installations for the current AutoSSL run in this log.
Analyzing “user”’s domains …
Analyzing “subdomain.domain.com” (website) …
TLS Status: OK
Certificate expiry: 12/22/21, 12:00 AM UTC (90.21 days from now)
Analyzing “domain.com” (website) …
TLS Status: OK
Certificate expiry: 12/9/21, 12:00 AM UTC (77.21 days from now)
This user’s SSL coverage is already optimal.



And we are receiving the SSL installation email correctly

We have solved this manually opening atuo ssl in user's individual cpanel -> SSL/TLS status -> select new domain or subdomain -> update -> autofill.

But is not normal.

Any ideas please?

Thanks very much in advance

 

[cPRex]

Hey there! Without showing the domain name or any personal info, could you provide a screenshot of what you're seeing on the browser side? That's the main thing I'd need to see to be able to provide you with better details on this issue.

 

[gfserver]

Hello, thanks for your answer.

I created a new subdomain test.xxxxxxx.com, ran AutoSSL and the certificate was installed

Here I attach images

 

[cPRex]

It's interesting that you get a date error. Does the issue go away if Apache is restarted, with no other changes?

 

[gfserver]

Hello, wow, I restarted apache and problem seems to be fixed now.

I will be in touch if it persists when adding a new domain.

Thanks very much @cPRex

 

[cPRex]

That's good to know - everything on the AutoSSL side is working well, but the Apache restarts are likely delayed. Does this system have piped logging enabled, or maybe another tool like Nginx as well?

It still might be worth submitting a ticket as installing an SSL is one of the actions where I would expect an Apache restart to happen immediately.

 

[gfserver]

Hello, we use Nginx.

About piped logging , I don't know what it is....

I will add a new domain right now, let me see what happens

 

[gfserver]

Hello, new domain added and SSL certificate immediately installed successfully, incredible.

I will be in touch if the issue appears again.

Thanks!

 

[cPRex]

Interesting - if it starts happening again it would be best to submit a ticket to our team so we can check it out.

 

[gfserver]

Hello, ok, sure. We will be checking for next new domain, addon domain or subdomain and let you know.

Thanks very much

 

[gfserver]

Note: SSL renewals are ok

 

[gfserver]

Hello, the problem persists, can I open a ticket?

Thanks!

 

[gfserver]

Hello, ticket #94366605

 

[cPRex]

You're always welcome to open a ticket - no need for my permission on that!

It looks like we gave you some advice about the wildcard certificates we found and you're doing some testing with that, but I'm following along with this on my end as well now.

 

[gfserver]

Hello @cPRex , that's correct, I will be testing some suggestions indicated for me in the ticket later, I will let you know..

Thanks!

 

[cPRex]

As of this point, it appears to be an issue with the Nginx software setup by Engintron.

 

[gfserver]

Hello @cPRex , that is correct.

Uninstalling an installing Engintron fixed the problem.

But we will be checking if the problem persists.

Thanks very much for your support

Regards

 

[cPRex]

I'm glad to hear things are working well now!