cabundle.cpanel.net did not have any working mirrors

[Havri]

Hello,

I'm trying to install a Let's Encrypt SSL certificate for a client of ours but I get the following error:

 4:49:20 PM WARN (XID quy5zc) The system failed to install an SSL certificate onto the website “mydomain.com” because of the following error: Certificate verification failed!The system did not find the Certificate Authority Bundle that matches this certificate.Contact “Let's Encrypt” to obtain the Certificate Authority Bundle for “Let's Encrypt Authority X3”.
 4:49:22 PM WARN (XID uyj86y) The system failed to install an SSL certificate onto the website “biologique.mydomain.com” because of the following error: Certificate verification failed!The system did not find the Certificate Authority Bundle that matches this certificate.Contact “Let's Encrypt” to obtain the Certificate Authority Bundle for “Let's Encrypt Authority X3”.

Running it from the command line gave me an error about working mirrors:

[[email protected] ~]# /usr/local/cpanel/bin/autossl_check --user=biologiq
This system has AutoSSL set to use “Let’s Encrypt™”.
Checking websites for “biologiq” …
    The website “biologique.mydomain.com”, owned by “biologiq”, has no SSL certificate. AutoSSL will attempt to obtain a new certificate and install it.
    The website “mydomain.com”, owned by “biologiq”, has no SSL certificate. AutoSSL will attempt to obtain a new certificate and install it.
    The system will attempt to renew SSL certificates for the following websites:
        biologique.mydomain.com (biologique.mydomain.com mydomain.uk www.mydomain.uk mail.mydomain.uk www.biologique.mydomain.com)
        mydomain.com (mydomain.com www.mydomain.com mail.mydomain.com)
warn [autossl_check] Failed to fetch cabundle information from cabundle.cpanel.net: cabundle.cpanel.net did not have any working mirrors.  Please check your internet connection or dns server. at /usr/local/cpanel/Cpanel/HttpRequest.pm line 918.

    Cpanel::Exception/(XID g2kq8n) The system failed to install an SSL certificate onto the website “biologique.mydomain.com” because of the following error: Certificate verification failed!The system did not find the Certificate Authority Bundle that matches this certificate.Contact “Let's Encrypt” to obtain the Certificate Authority Bundle for “Let's Encrypt Authority X3”.
    _disabled
warn [autossl_check] Failed to fetch cabundle information from cabundle.cpanel.net: cabundle.cpanel.net did not have any working mirrors.  Please check your internet connection or dns server. at /usr/local/cpanel/Cpanel/HttpRequest.pm line 918.

    Cpanel::Exception/(XID vkeyb2) The system failed to install an SSL certificate onto the website “mydomain.com” because of the following error: Certificate verification failed!The system did not find the Certificate Authority Bundle that matches this certificate.Contact “Let's Encrypt” to obtain the Certificate Authority Bundle for “Let's Encrypt Authority X3”.
    _disabled
The system has completed the AutoSSL check for “biologiq”.

This is the first time I'm getting this error.

Please let if I need to provide other info.

Thank you.

 

[cPanelMichael]

warn [autossl_check] Failed to fetch cabundle information from cabundle.cpanel.net: cabundle.cpanel.net did not have any working mirrors. Please check your internet connection or dns server. at /usr/local/cpanel/Cpanel/HttpRequest.pm line 918.

Hello,

This suggests there's something preventing your server from connecting to cabundle.cpanel.net over ports 443 or 80. Do you have any custom firewall rules blocking outgoing connections to those ports? If so, ensure to exclude IP addresses associated with cabundle.cpanel.net (you can use a command such as "dig cabundle.cpanel.net +short" to see which IP addresses are currently utilized by your server).

Thank you.

 

[keencs]

I am also experiencing this problem. It appears to be new. It is occurring on all of my cPanel servers and has never been seen before by me.

 

[keencs]

cabundle.cpanel.net appears to be down. All that is returned is a 404 page.

 

[cPanelMichael]

cabundle.cpanel.net appears to be down. All that is returned is a 404 page.

Hello,

This host isn't setup to open in a web browser. Could you run the "dig cabundle.cpanel.net +short" command and let us know what IP addresses are output?

Thank you.

 

[Havri]

Hello,

For me, the following 2 IPs are shown:

208.74.123.38
208.74.120.194

I have CSF configured on servers and port 80 and 443 are configured for TCP_IN and TCP_out, so that shouldn't be a problem. Like keencs said, I haven't seen this error until now.

Thank you.

 

[cPanelMichael]

I have CSF configured on servers and port 80 and 443 are configured for TCP_IN and TCP_out, so that shouldn't be a problem. Like keencs said, I haven't seen this error until now.

Could you open a support ticket using the link in my signature so we can take a closer look at the affected system? You can post the ticket number here so we can update this thread with the outcome.

Thank you.

 

[doropezaTSV]

Hello,

We are having a problem trying to renew a SSL cert. for one cpanel account.

At the SSL Admin interface when We try to add a new SSL this error is showed...

The lookup failed of an error: cabundle.cpanel.net did not have any working mirrors. Please check your internet connection or dns server. at /usr/local/cpanel/Cpanel/HttpRequest.pm line 899.

Searching at the forums we found than the problem could be from the resolv.conf but we got this results...

# host cabundle.cpanel.net
cabundle.cpanel.net has address 208.74.120.194
cabundle.cpanel.net has address 208.74.123.38

and the resolv.conf file has this...

127.0.0.1 server8 localhost.localdomain localhost
::1 localhost localhost6.localdomain6 localhost6
209.140.25.74 server8.1ahost.com server8

Please help with this...

 

[cPanelMichael]

Hello,

To update, internal case CPANEL-13021 was opened to address an issue where cabundle.cpanel.net isn't accessible on cPanel versions 62 and prior. The affected systems encounter error messages like this:

The lookup failed because of an error: API failure: cabundle.cpanel.net did not have any working mirrors. Please check your internet connection or dns server. at /usr/local/cpanel/Cpanel/HttpRequest.pm line 896.

Update 2: Our System Administration team has reverted some recent changes to the cabundle.cpanel.net servers to address this issue until the resolution stemming from CPANEL-13021 is published to new builds. I'll update this thread with more information on the status of this case as it becomes available.

Thank you.

 

[tkerns]

Any more news on this? It is still an issue for me, running a 32 bit version of centos 6.7 and cpanel 56 (which won't upgrade, due to running on 32 bit architecture).

 

[Todesengel]

Just wanted to chime in that I too, am experiencing this issue.

 

[Travis]

Any more news on this? It is still an issue for me, running a 32 bit version of centos 6.7 and cpanel 56 (which won't upgrade, due to running on 32 bit architecture).

Hi all!
I have an update for you all:

We are currently updating our infrastructure to support issues with compatibility on affected versions.

I will update this thread when the work is done.

 

[Travis]

Hi all!
I have an update for you all:

We are currently updating our infrastructure to support issues with compatibility on affected versions.

I will update this thread when the work is done.

We have implemented this fix and everything should be good now. Please let me know if you have any more issues.

 

[Alphonse Semaan]

We have implemented this fix and everything should be good now. Please let me know if you have any more issues.

I think i'm still having the same problem

cabundle.cpanel.net did not have any working mirrors.
Please check your internet connection or dns server. at /usr/local/cpanel/Cpanel/HttpRequest.pm line 603.
    Cpanel::HttpRequest::_getAddressList('Cpanel::HttpRequest=HASH(0x9fb0db4)', 'cabundle.cpanel.net') called at /usr/local/cpanel/Cpanel/HttpRequest.pm line 804
    Cpanel::HttpRequest::_initrequest('Cpanel::HttpRequest=HASH(0x9fb0db4)', 'host', 'cabundle.cpanel.net', 'url', '/v1.0/get_certificate_bundle', 'http_protocol', 'HTTP/1.0', 'destfile', ...) called at /usr/local/cpanel/Cpanel/HttpRequest.pm line 95
    Cpanel::HttpRequest::request('Cpanel::HttpRequest=HASH(0x9fb0db4)', 'protocol', 0, 'url', '/v1.0/get_certificate_bundle', 'body', 'certificate=-----BEGIN%20CERTIFICATE-----%0aMIIGCjCCBPKgAwIBAgIS...', 'headers', ...) called at /usr/local/cpanel/Cpanel/HttpRequest.pm line 481
    Cpanel::HttpRequest::httppost('Cpanel::HttpRequest=HASH(0x9fb0db4)', 'cabundle.cpanel.net', '/v1.0/get_certificate_bundle', 'HASH(0x9fb0f28)') called at /usr/local/cpanel/Cpanel/SSLInfo.pm line 57
    Cpanel::SSLInfo::fetchcabundle('-----BEGIN CERTIFICATE-----^JMIIGCjCCBPKgAwIBAgISA/tF/bBAzjPqNEat...') called at /usr/local/cpanel/Cpanel/SSLInfo.pm line 299
    Cpanel::SSLInfo::fetchinfo('example.com', '') called at /usr/local/cpanel/Cpanel/SSLInfo.pm line 211
    Cpanel::SSLInfo::api2_fetchinfo('crtdata', '', 'domain', 'example.com') called at /usr/local/cpanel/Cpanel/Api2/Exec.pm line 110
    eval {...} called at /usr/local/cpanel/Cpanel/Api2/Exec.pm line 110
    Cpanel::Api2::Exec::api2_exec('SSLInfo', 'fetchinfo', 'HASH(0x9fb0380)', 'HASH(0x90414c0)') called at cpanel line 977
    main::real_cpexectag('<?cp SSLInfo::fetchinfo(^J        [fetchsslinfo]^J                ...') called at cpanel line 4089
    main::dotag_finished_headers(0) called at cpanel line 3910
    main::cpanel_parseblock('<?cp SSLInfo::fetchinfo(^J        [fetchsslinfo]^J                ...') called at cpanel line 3824
    main::y('GLOB(0x9d81e50)') called at cpanel line 5142
    main::run_standard_mode() called at cpanel line 765

 

[cPanelMichael]

I think i'm still having the same problem

Please post the output from the following commands:

dig cabundle.cpanel.net +short
cat /usr/local/cpanel/version

Also, could you confirm the steps you are using to reproduce the issue?

Thank you.