cabundle.cpanel.net did not have any working mirrors

Havri

Well-Known Member
Oct 28, 2013
86
19
8
cPanel Access Level
Root Administrator
Hello,

I'm trying to install a Let's Encrypt SSL certificate for a client of ours but I get the following error:


Code:
 4:49:20 PM WARN (XID quy5zc) The system failed to install an SSL certificate onto the website “mydomain.com” because of the following error: Certificate verification failed!The system did not find the Certificate Authority Bundle that matches this certificate.Contact “Let's Encrypt” to obtain the Certificate Authority Bundle for “Let's Encrypt Authority X3”.
 4:49:22 PM WARN (XID uyj86y) The system failed to install an SSL certificate onto the website “biologique.mydomain.com” because of the following error: Certificate verification failed!The system did not find the Certificate Authority Bundle that matches this certificate.Contact “Let's Encrypt” to obtain the Certificate Authority Bundle for “Let's Encrypt Authority X3”.
Running it from the command line gave me an error about working mirrors:

Code:
[[email protected] ~]# /usr/local/cpanel/bin/autossl_check --user=biologiq
This system has AutoSSL set to use “Let’s Encrypt™”.
Checking websites for “biologiq” …
    The website “biologique.mydomain.com”, owned by “biologiq”, has no SSL certificate. AutoSSL will attempt to obtain a new certificate and install it.
    The website “mydomain.com”, owned by “biologiq”, has no SSL certificate. AutoSSL will attempt to obtain a new certificate and install it.
    The system will attempt to renew SSL certificates for the following websites:
        biologique.mydomain.com (biologique.mydomain.com mydomain.uk www.mydomain.uk mail.mydomain.uk www.biologique.mydomain.com)
        mydomain.com (mydomain.com www.mydomain.com mail.mydomain.com)
warn [autossl_check] Failed to fetch cabundle information from cabundle.cpanel.net: cabundle.cpanel.net did not have any working mirrors.  Please check your internet connection or dns server. at /usr/local/cpanel/Cpanel/HttpRequest.pm line 918.

    Cpanel::Exception/(XID g2kq8n) The system failed to install an SSL certificate onto the website “biologique.mydomain.com” because of the following error: Certificate verification failed!The system did not find the Certificate Authority Bundle that matches this certificate.Contact “Let's Encrypt” to obtain the Certificate Authority Bundle for “Let's Encrypt Authority X3”.
    _disabled
warn [autossl_check] Failed to fetch cabundle information from cabundle.cpanel.net: cabundle.cpanel.net did not have any working mirrors.  Please check your internet connection or dns server. at /usr/local/cpanel/Cpanel/HttpRequest.pm line 918.

    Cpanel::Exception/(XID vkeyb2) The system failed to install an SSL certificate onto the website “mydomain.com” because of the following error: Certificate verification failed!The system did not find the Certificate Authority Bundle that matches this certificate.Contact “Let's Encrypt” to obtain the Certificate Authority Bundle for “Let's Encrypt Authority X3”.
    _disabled
The system has completed the AutoSSL check for “biologiq”.

This is the first time I'm getting this error.

Please let if I need to provide other info.

Thank you.
 
Last edited:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,913
2,203
363
warn [autossl_check] Failed to fetch cabundle information from cabundle.cpanel.net: cabundle.cpanel.net did not have any working mirrors. Please check your internet connection or dns server. at /usr/local/cpanel/Cpanel/HttpRequest.pm line 918.
Hello,

This suggests there's something preventing your server from connecting to cabundle.cpanel.net over ports 443 or 80. Do you have any custom firewall rules blocking outgoing connections to those ports? If so, ensure to exclude IP addresses associated with cabundle.cpanel.net (you can use a command such as "dig cabundle.cpanel.net +short" to see which IP addresses are currently utilized by your server).

Thank you.
 

keencs

Member
Feb 16, 2013
21
3
53
cPanel Access Level
Root Administrator
I am also experiencing this problem. It appears to be new. It is occurring on all of my cPanel servers and has never been seen before by me.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,913
2,203
363
cabundle.cpanel.net appears to be down. All that is returned is a 404 page.
Hello,

This host isn't setup to open in a web browser. Could you run the "dig cabundle.cpanel.net +short" command and let us know what IP addresses are output?

Thank you.
 

Havri

Well-Known Member
Oct 28, 2013
86
19
8
cPanel Access Level
Root Administrator
Hello,

For me, the following 2 IPs are shown:

208.74.123.38
208.74.120.194

I have CSF configured on servers and port 80 and 443 are configured for TCP_IN and TCP_out, so that shouldn't be a problem. Like keencs said, I haven't seen this error until now.

Thank you.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,913
2,203
363
I have CSF configured on servers and port 80 and 443 are configured for TCP_IN and TCP_out, so that shouldn't be a problem. Like keencs said, I haven't seen this error until now.
Could you open a support ticket using the link in my signature so we can take a closer look at the affected system? You can post the ticket number here so we can update this thread with the outcome.

Thank you.
 

doropezaTSV

Member
Nov 17, 2015
13
0
1
Venezuela
cPanel Access Level
Root Administrator
Hello,

We are having a problem trying to renew a SSL cert. for one cpanel account.

At the SSL Admin interface when We try to add a new SSL this error is showed...

The lookup failed of an error: cabundle.cpanel.net did not have any working mirrors. Please check your internet connection or dns server. at /usr/local/cpanel/Cpanel/HttpRequest.pm line 899.
Searching at the forums we found than the problem could be from the resolv.conf but we got this results...

# host cabundle.cpanel.net
cabundle.cpanel.net has address 208.74.120.194
cabundle.cpanel.net has address 208.74.123.38
and the resolv.conf file has this...
127.0.0.1 server8 localhost.localdomain localhost
::1 localhost localhost6.localdomain6 localhost6
209.140.25.74 server8.1ahost.com server8

Please help with this...
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,913
2,203
363
Hello,

To update, internal case CPANEL-13021 was opened to address an issue where cabundle.cpanel.net isn't accessible on cPanel versions 62 and prior. The affected systems encounter error messages like this:

Code:
The lookup failed because of an error: API failure: cabundle.cpanel.net did not have any working mirrors. Please check your internet connection or dns server. at /usr/local/cpanel/Cpanel/HttpRequest.pm line 896.
Update 2: Our System Administration team has reverted some recent changes to the cabundle.cpanel.net servers to address this issue until the resolution stemming from CPANEL-13021 is published to new builds. I'll update this thread with more information on the status of this case as it becomes available.

Thank you.
 
  • Like
Reactions: eva2000

tkerns

Active Member
Jun 13, 2007
34
0
56
Any more news on this? It is still an issue for me, running a 32 bit version of centos 6.7 and cpanel 56 (which won't upgrade, due to running on 32 bit architecture).
 

Travis

Active Member
Apr 24, 2002
31
3
383
cPanel Access Level
Root Administrator
Any more news on this? It is still an issue for me, running a 32 bit version of centos 6.7 and cpanel 56 (which won't upgrade, due to running on 32 bit architecture).
Hi all!
I have an update for you all:

We are currently updating our infrastructure to support issues with compatibility on affected versions.

I will update this thread when the work is done.
 
  • Like
Reactions: eva2000 and Infopro

Travis

Active Member
Apr 24, 2002
31
3
383
cPanel Access Level
Root Administrator
Hi all!
I have an update for you all:

We are currently updating our infrastructure to support issues with compatibility on affected versions.

I will update this thread when the work is done.
We have implemented this fix and everything should be good now. Please let me know if you have any more issues.
 

Alphonse Semaan

Registered
May 31, 2017
1
0
1
united arab emirates
cPanel Access Level
Website Owner
We have implemented this fix and everything should be good now. Please let me know if you have any more issues.
I think i'm still having the same problem

Code:
cabundle.cpanel.net did not have any working mirrors.
Please check your internet connection or dns server. at /usr/local/cpanel/Cpanel/HttpRequest.pm line 603.
    Cpanel::HttpRequest::_getAddressList('Cpanel::HttpRequest=HASH(0x9fb0db4)', 'cabundle.cpanel.net') called at /usr/local/cpanel/Cpanel/HttpRequest.pm line 804
    Cpanel::HttpRequest::_initrequest('Cpanel::HttpRequest=HASH(0x9fb0db4)', 'host', 'cabundle.cpanel.net', 'url', '/v1.0/get_certificate_bundle', 'http_protocol', 'HTTP/1.0', 'destfile', ...) called at /usr/local/cpanel/Cpanel/HttpRequest.pm line 95
    Cpanel::HttpRequest::request('Cpanel::HttpRequest=HASH(0x9fb0db4)', 'protocol', 0, 'url', '/v1.0/get_certificate_bundle', 'body', 'certificate=-----BEGIN%20CERTIFICATE-----%0aMIIGCjCCBPKgAwIBAgIS...', 'headers', ...) called at /usr/local/cpanel/Cpanel/HttpRequest.pm line 481
    Cpanel::HttpRequest::httppost('Cpanel::HttpRequest=HASH(0x9fb0db4)', 'cabundle.cpanel.net', '/v1.0/get_certificate_bundle', 'HASH(0x9fb0f28)') called at /usr/local/cpanel/Cpanel/SSLInfo.pm line 57
    Cpanel::SSLInfo::fetchcabundle('-----BEGIN CERTIFICATE-----^JMIIGCjCCBPKgAwIBAgISA/tF/bBAzjPqNEat...') called at /usr/local/cpanel/Cpanel/SSLInfo.pm line 299
    Cpanel::SSLInfo::fetchinfo('example.com', '') called at /usr/local/cpanel/Cpanel/SSLInfo.pm line 211
    Cpanel::SSLInfo::api2_fetchinfo('crtdata', '', 'domain', 'example.com') called at /usr/local/cpanel/Cpanel/Api2/Exec.pm line 110
    eval {...} called at /usr/local/cpanel/Cpanel/Api2/Exec.pm line 110
    Cpanel::Api2::Exec::api2_exec('SSLInfo', 'fetchinfo', 'HASH(0x9fb0380)', 'HASH(0x90414c0)') called at cpanel line 977
    main::real_cpexectag('<?cp SSLInfo::fetchinfo(^J        [fetchsslinfo]^J                ...') called at cpanel line 4089
    main::dotag_finished_headers(0) called at cpanel line 3910
    main::cpanel_parseblock('<?cp SSLInfo::fetchinfo(^J        [fetchsslinfo]^J                ...') called at cpanel line 3824
    main::y('GLOB(0x9d81e50)') called at cpanel line 5142
    main::run_standard_mode() called at cpanel line 765
 
Last edited by a moderator:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,913
2,203
363
I think i'm still having the same problem
Please post the output from the following commands:

Code:
dig cabundle.cpanel.net +short
cat /usr/local/cpanel/version
Also, could you confirm the steps you are using to reproduce the issue?

Thank you.