Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

AutoSSL warning

Discussion in 'Security' started by MShiraz Baig, Aug 20, 2017.

Tags:
  1. MShiraz Baig

    MShiraz Baig Member

    Joined:
    Aug 20, 2017
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    UK
    cPanel Access Level:
    Root Administrator
    I keep getting the following warning in autossl logs, every day. Is it normal? If not, how to correct it.

    3:37:08 AM WARN “mail.example.com” failed its authorization because of an error: No valid IP addresses found for mail.example.com (The server could not resolve a domain name (urn:acme:error:unknownHost))
    3:37:09 AM SUCCESS The system has installed a new certificate onto “example”’s website “example.com”.
     
    #1 MShiraz Baig, Aug 20, 2017
    Last edited by a moderator: Aug 20, 2017
  2. 24x7server

    24x7server Well-Known Member

    Joined:
    Apr 17, 2013
    Messages:
    1,447
    Likes Received:
    56
    Trophy Points:
    28
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Hi,

    You should check the DNS of the domain properly once and make sure that the subdomain link mail.example.com goes to proper IP address. You can also send in a ping request for it to verify if it exists..

    # ping mail.example.com
     
  3. MShiraz Baig

    MShiraz Baig Member

    Joined:
    Aug 20, 2017
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    UK
    cPanel Access Level:
    Root Administrator
    Here is my DNS record:

    example.com. 14400 IN A 173.212.xxx.xxx
    ...........
    mail 14400 IN CNAME example.com.

    I did the ping to example.com, and to mail.example.com
    It is responding OK, no packets loss.

    So, still I do not understand the problem.
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,165
    Likes Received:
    1,372
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    Did you check this from the server's command line? The cPanel server needs to resolve "mail.domain.tld" to the IP address associated with the cPanel account for domain validation to succeed. EX:

    Code:
    # host mail.domain.tld
    Thank you.
     
  5. MShiraz Baig

    MShiraz Baig Member

    Joined:
    Aug 20, 2017
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    UK
    cPanel Access Level:
    Root Administrator
    I did this check.... host mail.domain.tld .... but no use.
    I have now deleted all accounts. Created a new domain. enable autossl. It has issued a self signed certificate. And this is the log message generated.
    Code:
    10:16:29 AM The website “example.com”, owned by “shiraz”, has a faulty SSL certificate (OPENSSL_VERIFY:0:18:DEPTH_ZERO_SELF_SIGNED_CERT NOT_ALL_DOMAINS). AutoSSL will attempt to replace this certificate.
     10:16:29 AM WARN The domain “example.com” failed domain control validation: “example.com” does not resolve to any IPv4 addresses on the internet.
    
    What do I need to do, to get correct certificate.
     
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,165
    Likes Received:
    1,372
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    This is generally caused by a domain name using third-party name servers, or due to the use of invalid resolvers in the /etc/resolv.conf file. Could you open a support ticket using the link in my signature so we can see why your system is unable to resolve the domain name to a valid IP address?

    Thank you.
     
  7. MShiraz Baig

    MShiraz Baig Member

    Joined:
    Aug 20, 2017
    Messages:
    9
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    UK
    cPanel Access Level:
    Root Administrator
    I read the "complicated process" of creating a support ticket. Most of the things I understood, but did not understand, "Create A Manage2 account", where do I create it and do I do it through adduser on the server or where do I do it. And I assume I have to give password to and username on the ticket. Is there no simpler procedure of submitting a support ticket.

    Anyway, here is my /etc/resolv.conf
    # Generated by NetworkManager
    search contaboserver.net
    nameserver 213.136.xx.xx
    nameserver 79.143.xxx.xxx
    nameserver 2a02:c207::1:xx
    # NOTE: the libc resolver may not support more than 3 nameservers.
    # The nameservers listed below may not be recognized.
    nameserver 2a02:c205::1:xx
     
    #7 MShiraz Baig, Aug 22, 2017
    Last edited by a moderator: Aug 22, 2017
  8. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    15,679
    Likes Received:
    299
    Trophy Points:
    433
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    It's actually quite easy. Create an account here:
    cPanel Customer Portal
    Make sure you've logged into that account at least once properly.

    When you need to open a ticket, you can do so right from here:
    WebHost Manager »Support »Create Support Ticket
     
Loading...

Share This Page