Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

SOLVED AutoSSL still not renewed after expiring

Discussion in 'Security' started by tdldrg, Dec 7, 2016.

Tags:
  1. tdldrg

    tdldrg Registered

    Joined:
    Jul 17, 2016
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    PHL
    cPanel Access Level:
    Root Administrator
    I enabled AutoSSL by cPanel and it gave a ssl for 8/30-11/29 which worked fine but then it expired and until to this date still not renewed. I checked the log everyday all I see is same message yet it hasn't renewed it...

    10:59:41 AM The website “domain.com”, owned by “xxxx”, has a faulty SSL certificate (OPENSSL_VERIFY:0:10:CERT_HAS_EXPIRED NOT_ALL_DOMAINS ALMOST_EXPIRED AUTOSSL_READY_FOR_RENEWAL). AutoSSL will attempt to replace this certificate.
    10:59:41 AM The system will attempt to renew SSL certificates for the following websites:

    Wasn't it suppose to renew 10days earlier but it seems it doesn't renew even after expiring and still attemping only..

    How to force it to renew it right away? And why it seems it doesn't renew the expired ssl?
     
    #1 tdldrg, Dec 7, 2016
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    46,968
    Likes Received:
    2,119
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    Could you let us know which version of cPanel is installed on this system? You can check via the following command:

    Code:
    cat /usr/local/cpanel/version
    Also, could you let us know the rest of the output? For instance, are there any DCV (Domain Control Validation) error messages?

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 cPanelMichael, Dec 7, 2016
  3. tdldrg

    tdldrg Registered

    Joined:
    Jul 17, 2016
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    PHL
    cPanel Access Level:
    Root Administrator
    It doesn't have any error that goes orange like some. Here's the new one today from 'all users' log. Til now it is still not renewed itself after expiring and same goes for some few domains that have expired already. Seems like stuck on attempt to renew SSL...
    Code:
    11:03:02 PM Checking websites for “xxxxx” …
11:03:02 PM The website “xxxxxx.co.uk”, owned by “xxxxx”, has a faulty SSL certificate (OPENSSL_VERIFY:0:10:CERT_HAS_EXPIRED NOT_ALL_DOMAINS ALMOST_EXPIRED AUTOSSL_READY_FOR_RENEWAL). AutoSSL will attempt to replace this certificate.
11:03:06 PM The system will attempt to renew SSL certificates for the following websites:
11:03:06 PM xxxxx.co.uk (xxxxxxxx.com xxxxxxxxx.co.uk www.xxxxxxx.com www.xxxxxxx.co.uk mail.xxxxxxxcom mail.xxxxxx.co.uk)
11:03:06 PM The system has completed the AutoSSL check for “xxxxx”.
     
    #3 tdldrg, Dec 8, 2016
    Last edited by a moderator: Dec 8, 2016
  4. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    46,968
    Likes Received:
    2,119
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    Are you sure the previous SSL certificates were installed with the AutoSSL feature? If not, you'd need to enable the following option under the "Options" tab in "WHM >> Manage AutoSSL":

    Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates.

    Here's the option's description:

    Note you can use the following command to manually run the AutoSSL check for an individual account if you don't want to wait for the automatic nightly run:

    Code:
    /usr/local/cpanel/bin/autossl_check --user $username
    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #4 cPanelMichael, Dec 8, 2016
  5. tdldrg

    tdldrg Registered

    Joined:
    Jul 17, 2016
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    PHL
    cPanel Access Level:
    Root Administrator
    Yes I'm quite sure it's AutoSSL installed the expired one. Only certificates issued from AutoSSL covers for a few months as mentioned it was 8/30/2016 - 11/29/2016. Could wish 6 months or a year perhaps.

    I didn't enable the "Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates." as we also have other non-AutoSSL issued certificates using EV and other SSL installed.

    I've also tried that manually checking the account via WHM AutoSSL manage user or command you suggest but just the same.
    Code:
    4:07:43 PM This system has AutoSSL set to use “cPanel (powered by Comodo)”.
4:07:43 PM Checking websites for “xxxx …
4:07:43 PM The website “xxxx.co.uk”, owned by “xxxx”, has a faulty SSL certificate (OPENSSL_VERIFY:0:10:CERT_HAS_EXPIRED NOT_ALL_DOMAINS ALMOST_EXPIRED AUTOSSL_READY_FOR_RENEWAL). AutoSSL will attempt to replace this certificate.
4:07:43 PM The system will attempt to renew SSL certificates for the following websites:
4:07:43 PM xxxx.co.uk (xxxxx.com xxxxx.co.uk www.xxxxx.com www.xxxxxx.co.uk mail.xxxxx.com mail.xxxxx.co.uk)
4:07:43 PM The system has completed the AutoSSL check for “xxxx”.
4:07:43 PM The system has finished checking 1 user.
     
    #5 tdldrg, Dec 8, 2016
    Last edited by a moderator: Dec 9, 2016
  6. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    46,968
    Likes Received:
    2,119
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Could you open a support ticket using the link in my signature so we can take a closer look? You can post the ticket number here so we can update this thread with the outcome.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #6 cPanelMichael, Dec 8, 2016
  7. tdldrg

    tdldrg Registered

    Joined:
    Jul 17, 2016
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    PHL
    cPanel Access Level:
    Root Administrator
    I've opened a ticket Support Request ID is: 8047329
     
    #7 tdldrg, Dec 8, 2016
  8. cPanelMichael

    cPanelMichael Technical Support Community Manager Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    46,968
    Likes Received:
    2,119
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    To update, it looks like the renewal failed because Comodo was blocked from accessing the website due to rules in the account's .htaccess file, and thus domain validation failed. Regarding the certificate renewal schedule, this is noted on the Manage AutoSSL document:

    Let us know if you have any additional questions.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #8 cPanelMichael, Dec 12, 2016
(You must log in or sign up to post here.)
Loading...
Similar Threads - AutoSSL still renewed
  1. cumanzor

    SOLVED AutoSSL renews the same cert even if still valid

    cumanzor, Sep 20, 2017, in forum: Security
    Replies:
    11
    Views:
    1,347
    cumanzor
    Nov 20, 2017
  2. royce

    AutoSSL and CAA Records

    royce, May 7, 2019, in forum: Security
    Replies:
    1
    Views:
    171
    cPanelLauren
    May 8, 2019
  3. Art Shotwell

    AutoSSL certificate not renewing

    Art Shotwell, May 7, 2019, in forum: Security
    Replies:
    2
    Views:
    230
    Art Shotwell
    May 14, 2019 at 12:44 PM
  4. Ebad

    Move some domains from LetsEncrypt to cPanel AutoSSL?

    Ebad, May 2, 2019, in forum: Security
    Replies:
    3
    Views:
    239
    cPanelMichael
    May 2, 2019
  5. adeyjones

    SOLVED [CPANEL-26207] AutoSSL - Domains not passing validation

    adeyjones, Apr 26, 2019, in forum: Security
    Replies:
    16
    Views:
    771
    cPanelLauren
    May 16, 2019 at 9:39 AM

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice