The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

AutoSSL stuck in pending

Discussion in 'Security' started by Adam S., Mar 15, 2017.

Tags:
  1. Adam S.

    Adam S. Registered

    Joined:
    May 1, 2015
    Messages:
    3
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    PEI
    cPanel Access Level:
    Root Administrator
    I have several domains on my server that are all stuck in pending renewals.

    They all say:
    The system is waiting on the AutoSSL provider to validate and issue the certificate.


    The most recent log for one of the sites says:
    Code:
    4:41:39 AM This system has AutoSSL set to use “cPanel (powered by Comodo)”.
    4:41:39 AM Checking websites for “username” …
    4:41:39 AM The website “domain.com”, owned by “username”, has a faulty SSL certificate (OPENSSL_VERIFY:0:10:CERT_HAS_EXPIRED NOT_ALL_DOMAINS ALMOST_EXPIRED AUTOSSL_READY_FOR_RENEWAL). AutoSSL will attempt to replace this certificate.
    4:41:41 AM WARN The domain “mail.domain.sg” failed domain control validation: “mail.domain.sg” does not resolve to any IPv4 addresses on the internet. at bin/autossl_check.pl line 562.
    4:41:41 AM WARN The domain “mail.domain.com” failed domain control validation: “mail.domain.com” does not resolve to any IPv4 addresses on the internet. at bin/autossl_check.pl line 562.
    4:41:42 AM WARN The domain “mail.domain.com.sg” failed domain control validation: “mail.domain.com.sg” does not resolve to any IPv4 addresses on the internet. at bin/autossl_check.pl line 562.
    4:41:42 AM The system will attempt to renew SSL certificates for the following websites:
    4:41:42 AM domain.com (domain.com domain.sg domain.com.sg www.domain.sg www.domain.com www.domain.com.sg)
    4:41:42 AM The system has completed the AutoSSL check for “username”.
    
    
    I thought the Mail entries might be what was holding it up, but the other sites also stuck in pending do not have this issue, or any warnings.
     
    #1 Adam S., Mar 15, 2017
    Last edited by a moderator: Mar 15, 2017
  2. mattlindi

    mattlindi Member

    Joined:
    Jan 20, 2004
    Messages:
    10
    Likes Received:
    0
    Trophy Points:
    151
    I am having the same issue on several domains since March 9.

    Code:
    Log for the AutoSSL run for “<redacted>”: Wednesday, March 15, 2017 6:58:51 AM GMT-0400 (cPanel (powered by Comodo))
    6:58:51 AM This system has AutoSSL set to use “cPanel (powered by Comodo)”.
    6:58:51 AM Checking websites for “<redacted>” …
    6:58:52 AM The website “<redacted>.com”, owned by “<redacted>”, has a faulty SSL certificate (OPENSSL_VERIFY:0:10:CERT_HAS_EXPIRED ALMOST_EXPIRED AUTOSSL_READY_FOR_RENEWAL). AutoSSL will attempt to replace this certificate.
    6:58:52 AM The system will attempt to renew SSL certificates for the following websites:
    6:58:52 AM <redacted>.com (<redacted>.com www.<redacted>.com mail.<redacted>.com)
    6:58:52 AM The system has completed the AutoSSL check for “<redacted>”. 
    
    Log for the AutoSSL run for “<redacted>”: Tuesday, March 14, 2017 1:01:27 PM GMT-0400 (cPanel (powered by Comodo))
    1:01:27 PM This system has AutoSSL set to use “cPanel (powered by Comodo)”.
    1:01:27 PM Checking websites for “<redacted>” …
    1:01:28 PM The website “<redacted>.com”, owned by “<redacted>”, has a faulty SSL certificate (OPENSSL_VERIFY:0:10:CERT_HAS_EXPIRED ALMOST_EXPIRED AUTOSSL_READY_FOR_RENEWAL). AutoSSL will attempt to replace this certificate.
    1:01:28 PM The system will attempt to renew SSL certificates for the following websites:
    1:01:28 PM <redacted>.com (<redacted>.com www.<redacted>.com mail.<redacted>.com)
    1:01:28 PM The system has completed the AutoSSL check for “<redacted>”. 
    
     
  3. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,167
    Likes Received:
    1,295
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    Feel free to open a support ticket using the link in my signature if you'd like us to take a closer look to see why a certificate has not yet been issued. You can post the ticket number here and we can update this thread with the outcome.

    Thank you.
     
  4. mattlindi

    mattlindi Member

    Joined:
    Jan 20, 2004
    Messages:
    10
    Likes Received:
    0
    Trophy Points:
    151
    Hi Michael - thanks

    Ticket # 8306115
     
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,167
    Likes Received:
    1,295
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    To update, it looks like this was the result of .htaccess rules blocking the Comodo user-agent. Removing the block will allow the domain validation process to succeed.

    Thank you.
     
  6. mathfrick

    mathfrick Registered

    Joined:
    Apr 10, 2017
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Montreal, Quebec, Canada
    cPanel Access Level:
    Root Administrator
    Hi, i'm having the same issue... AutoSSL stuck in pending

    Take a look of my printscreen
     

    Attached Files:

  7. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,167
    Likes Received:
    1,295
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello @mathfrick,

    Do you notice any error messages for this account under the "Logs" tab in "WHM >> Manage AutoSSL"?

    Thank you.
     
  8. mathfrick

    mathfrick Registered

    Joined:
    Apr 10, 2017
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Montreal, Quebec, Canada
    cPanel Access Level:
    Root Administrator
    Code:
    Log for the AutoSSL run for “maplatef”: Monday, April 10, 2017 8:46:27 AM GMT-0400 (cPanel (powered by Comodo))
    8:46:27 AM This system has AutoSSL set to use “cPanel (powered by Comodo)”.
    8:46:27 AM Checking websites for “maplatef” …
    8:46:39 AM The website “example.ma-pub.ca”, owned by “maplatef”, has no SSL certificate. AutoSSL will attempt to obtain a new certificate and install it.
    8:46:39 AM The system will attempt to renew SSL certificates for the following websites:
    8:46:39 AM example.ma-pub.ca (example.ma-pub.ca example.com www.example.com mail.example.com www.example.ma-pub.ca)
    8:46:39 AM The system has completed the AutoSSL check for “maplatef”. 
    Code:
    Log for the AutoSSL run for all users: Monday, April 10, 2017 7:07:11 AM GMT-0400 (cPanel (powered by Comodo))
    7:07:11 AM This system has AutoSSL set to use “cPanel (powered by Comodo)”.
    7:07:11 AM Checking websites for “maplatef” …
    7:07:23 AM The website “example.ma-pub.ca”, owned by “maplatef”, has no SSL certificate. AutoSSL will attempt to obtain a new certificate and install it.
    7:07:24 AM The system will attempt to renew SSL certificates for the following websites:
    7:07:24 AM example.ma-pub.ca (example.ma-pub.ca example.com www.example.com mail.example.com www.example.ma-pub.ca)
    7:07:24 AM The system has completed the AutoSSL check for “maplatef”.
    7:07:24 AM Checking websites for “ulpages” …
    7:07:24 AM The website owned by “ulpages” has a valid SSL certificate.
    7:07:24 AM The system has completed the AutoSSL check for “ulpages”.
    7:07:24 AM The system has finished checking 2 users.
    7:07:24 AM AutoSSL has deleted the expired log for the provider “cPanel” from Mar 11, 2017, 10:08:01 AM (UTC). 
     
    #8 mathfrick, Apr 10, 2017
    Last edited by a moderator: Apr 10, 2017
  9. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,167
    Likes Received:
    1,295
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello @mathfrick,

    Feel free to open a support ticket using the link in my signature if you'd like us to take a closer look to see why the certificate is still pending. You can post the ticket number here so we can update this thread with the outcome.

    Thank you.
     
  10. mathfrick

    mathfrick Registered

    Joined:
    Apr 10, 2017
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Montreal, Quebec, Canada
    cPanel Access Level:
    Root Administrator

    8372529
     

    Attached Files:

  11. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,167
    Likes Received:
    1,295
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    To update, no issues were found. The certificate is simply waiting on Comodo for processing. While the AutoSSL feature generally only requires a short amount of time to complete the installation process, certain factors may lead to longer wait times. Under some conditions, certificates may require up to 48 hours to process.

    Thank you.
     
Loading...

Share This Page