Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

cabundle.cpanel.net did not have any working mirrors

Discussion in 'Security' started by Havri, May 3, 2017.

  1. Havri

    Havri Well-Known Member

    Joined:
    Oct 28, 2013
    Messages:
    58
    Likes Received:
    14
    Trophy Points:
    8
    cPanel Access Level:
    Root Administrator
    Hello,

    I'm trying to install a Let's Encrypt SSL certificate for a client of ours but I get the following error:


    Code:
     4:49:20 PM WARN (XID quy5zc) The system failed to install an SSL certificate onto the website “mydomain.com” because of the following error: Certificate verification failed!The system did not find the Certificate Authority Bundle that matches this certificate.Contact “Let's Encrypt” to obtain the Certificate Authority Bundle for “Let's Encrypt Authority X3”.
     4:49:22 PM WARN (XID uyj86y) The system failed to install an SSL certificate onto the website “biologique.mydomain.com” because of the following error: Certificate verification failed!The system did not find the Certificate Authority Bundle that matches this certificate.Contact “Let's Encrypt” to obtain the Certificate Authority Bundle for “Let's Encrypt Authority X3”.
    Running it from the command line gave me an error about working mirrors:

    Code:
    [root@abc01 ~]# /usr/local/cpanel/bin/autossl_check --user=biologiq
    This system has AutoSSL set to use “Let’s Encrypt™”.
    Checking websites for “biologiq” …
        The website “biologique.mydomain.com”, owned by “biologiq”, has no SSL certificate. AutoSSL will attempt to obtain a new certificate and install it.
        The website “mydomain.com”, owned by “biologiq”, has no SSL certificate. AutoSSL will attempt to obtain a new certificate and install it.
        The system will attempt to renew SSL certificates for the following websites:
            biologique.mydomain.com (biologique.mydomain.com mydomain.uk www.mydomain.uk mail.mydomain.uk www.biologique.mydomain.com)
            mydomain.com (mydomain.com www.mydomain.com mail.mydomain.com)
    warn [autossl_check] Failed to fetch cabundle information from cabundle.cpanel.net: cabundle.cpanel.net did not have any working mirrors.  Please check your internet connection or dns server. at /usr/local/cpanel/Cpanel/HttpRequest.pm line 918.
    
        Cpanel::Exception/(XID g2kq8n) The system failed to install an SSL certificate onto the website “biologique.mydomain.com” because of the following error: Certificate verification failed!The system did not find the Certificate Authority Bundle that matches this certificate.Contact “Let's Encrypt” to obtain the Certificate Authority Bundle for “Let's Encrypt Authority X3”.
        _disabled
    warn [autossl_check] Failed to fetch cabundle information from cabundle.cpanel.net: cabundle.cpanel.net did not have any working mirrors.  Please check your internet connection or dns server. at /usr/local/cpanel/Cpanel/HttpRequest.pm line 918.
    
        Cpanel::Exception/(XID vkeyb2) The system failed to install an SSL certificate onto the website “mydomain.com” because of the following error: Certificate verification failed!The system did not find the Certificate Authority Bundle that matches this certificate.Contact “Let's Encrypt” to obtain the Certificate Authority Bundle for “Let's Encrypt Authority X3”.
        _disabled
    The system has completed the AutoSSL check for “biologiq”.

    This is the first time I'm getting this error.

    Please let if I need to provide other info.

    Thank you.
     
    #1 Havri, May 3, 2017
    Last edited: May 3, 2017
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,659
    Likes Received:
    1,428
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    This suggests there's something preventing your server from connecting to cabundle.cpanel.net over ports 443 or 80. Do you have any custom firewall rules blocking outgoing connections to those ports? If so, ensure to exclude IP addresses associated with cabundle.cpanel.net (you can use a command such as "dig cabundle.cpanel.net +short" to see which IP addresses are currently utilized by your server).

    Thank you.
     
  3. keencs

    keencs Member

    Joined:
    Feb 16, 2013
    Messages:
    11
    Likes Received:
    1
    Trophy Points:
    3
    cPanel Access Level:
    Root Administrator
    I am also experiencing this problem. It appears to be new. It is occurring on all of my cPanel servers and has never been seen before by me.
     
  4. keencs

    keencs Member

    Joined:
    Feb 16, 2013
    Messages:
    11
    Likes Received:
    1
    Trophy Points:
    3
    cPanel Access Level:
    Root Administrator
    cabundle.cpanel.net appears to be down. All that is returned is a 404 page.
     
  5. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,659
    Likes Received:
    1,428
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    This host isn't setup to open in a web browser. Could you run the "dig cabundle.cpanel.net +short" command and let us know what IP addresses are output?

    Thank you.
     
  6. Havri

    Havri Well-Known Member

    Joined:
    Oct 28, 2013
    Messages:
    58
    Likes Received:
    14
    Trophy Points:
    8
    cPanel Access Level:
    Root Administrator
    Hello,

    For me, the following 2 IPs are shown:

    208.74.123.38
    208.74.120.194

    I have CSF configured on servers and port 80 and 443 are configured for TCP_IN and TCP_out, so that shouldn't be a problem. Like keencs said, I haven't seen this error until now.

    Thank you.
     
  7. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,659
    Likes Received:
    1,428
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Could you open a support ticket using the link in my signature so we can take a closer look at the affected system? You can post the ticket number here so we can update this thread with the outcome.

    Thank you.
     
  8. doropezaTSV

    doropezaTSV Member

    Joined:
    Nov 17, 2015
    Messages:
    13
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Venezuela
    cPanel Access Level:
    Root Administrator
    Hello,

    We are having a problem trying to renew a SSL cert. for one cpanel account.

    At the SSL Admin interface when We try to add a new SSL this error is showed...

    Searching at the forums we found than the problem could be from the resolv.conf but we got this results...

    and the resolv.conf file has this...

    Please help with this...
     
  9. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,659
    Likes Received:
    1,428
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    To update, internal case CPANEL-13021 was opened to address an issue where cabundle.cpanel.net isn't accessible on cPanel versions 62 and prior. The affected systems encounter error messages like this:

    Code:
    The lookup failed because of an error: API failure: cabundle.cpanel.net did not have any working mirrors. Please check your internet connection or dns server. at /usr/local/cpanel/Cpanel/HttpRequest.pm line 896. 
    Update 2: Our System Administration team has reverted some recent changes to the cabundle.cpanel.net servers to address this issue until the resolution stemming from CPANEL-13021 is published to new builds. I'll update this thread with more information on the status of this case as it becomes available.

    Thank you.
     
    eva2000 likes this.
  10. tkerns

    tkerns Active Member

    Joined:
    Jun 13, 2007
    Messages:
    34
    Likes Received:
    0
    Trophy Points:
    56
    Any more news on this? It is still an issue for me, running a 32 bit version of centos 6.7 and cpanel 56 (which won't upgrade, due to running on 32 bit architecture).
     
  11. Todesengel

    Todesengel Member

    Joined:
    Jul 15, 2014
    Messages:
    12
    Likes Received:
    1
    Trophy Points:
    3
    cPanel Access Level:
    Reseller Owner
    Just wanted to chime in that I too, am experiencing this issue.
     
  12. Travis

    Travis Active Member
    Staff Member

    Joined:
    Apr 24, 2002
    Messages:
    31
    Likes Received:
    3
    Trophy Points:
    383
    Location:
    cPanel Main Office
    cPanel Access Level:
    Root Administrator
    Hi all!
    I have an update for you all:

    We are currently updating our infrastructure to support issues with compatibility on affected versions.

    I will update this thread when the work is done.
     
    eva2000 and Infopro like this.
  13. Travis

    Travis Active Member
    Staff Member

    Joined:
    Apr 24, 2002
    Messages:
    31
    Likes Received:
    3
    Trophy Points:
    383
    Location:
    cPanel Main Office
    cPanel Access Level:
    Root Administrator
    We have implemented this fix and everything should be good now. Please let me know if you have any more issues.
     
  14. Alphonse Semaan

    Alphonse Semaan Registered

    Joined:
    May 31, 2017
    Messages:
    1
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    united arab emirates
    cPanel Access Level:
    Website Owner
    I think i'm still having the same problem

    Code:
    cabundle.cpanel.net did not have any working mirrors.
    Please check your internet connection or dns server. at /usr/local/cpanel/Cpanel/HttpRequest.pm line 603.
        Cpanel::HttpRequest::_getAddressList('Cpanel::HttpRequest=HASH(0x9fb0db4)', 'cabundle.cpanel.net') called at /usr/local/cpanel/Cpanel/HttpRequest.pm line 804
        Cpanel::HttpRequest::_initrequest('Cpanel::HttpRequest=HASH(0x9fb0db4)', 'host', 'cabundle.cpanel.net', 'url', '/v1.0/get_certificate_bundle', 'http_protocol', 'HTTP/1.0', 'destfile', ...) called at /usr/local/cpanel/Cpanel/HttpRequest.pm line 95
        Cpanel::HttpRequest::request('Cpanel::HttpRequest=HASH(0x9fb0db4)', 'protocol', 0, 'url', '/v1.0/get_certificate_bundle', 'body', 'certificate=-----BEGIN%20CERTIFICATE-----%0aMIIGCjCCBPKgAwIBAgIS...', 'headers', ...) called at /usr/local/cpanel/Cpanel/HttpRequest.pm line 481
        Cpanel::HttpRequest::httppost('Cpanel::HttpRequest=HASH(0x9fb0db4)', 'cabundle.cpanel.net', '/v1.0/get_certificate_bundle', 'HASH(0x9fb0f28)') called at /usr/local/cpanel/Cpanel/SSLInfo.pm line 57
        Cpanel::SSLInfo::fetchcabundle('-----BEGIN CERTIFICATE-----^JMIIGCjCCBPKgAwIBAgISA/tF/bBAzjPqNEat...') called at /usr/local/cpanel/Cpanel/SSLInfo.pm line 299
        Cpanel::SSLInfo::fetchinfo('example.com', '') called at /usr/local/cpanel/Cpanel/SSLInfo.pm line 211
        Cpanel::SSLInfo::api2_fetchinfo('crtdata', '', 'domain', 'example.com') called at /usr/local/cpanel/Cpanel/Api2/Exec.pm line 110
        eval {...} called at /usr/local/cpanel/Cpanel/Api2/Exec.pm line 110
        Cpanel::Api2::Exec::api2_exec('SSLInfo', 'fetchinfo', 'HASH(0x9fb0380)', 'HASH(0x90414c0)') called at cpanel line 977
        main::real_cpexectag('<?cp SSLInfo::fetchinfo(^J        [fetchsslinfo]^J                ...') called at cpanel line 4089
        main::dotag_finished_headers(0) called at cpanel line 3910
        main::cpanel_parseblock('<?cp SSLInfo::fetchinfo(^J        [fetchsslinfo]^J                ...') called at cpanel line 3824
        main::y('GLOB(0x9d81e50)') called at cpanel line 5142
        main::run_standard_mode() called at cpanel line 765
    
    
     
    #14 Alphonse Semaan, May 31, 2017
    Last edited by a moderator: May 31, 2017
  15. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,659
    Likes Received:
    1,428
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Please post the output from the following commands:

    Code:
    dig cabundle.cpanel.net +short
    cat /usr/local/cpanel/version
    Also, could you confirm the steps you are using to reproduce the issue?

    Thank you.
     
Loading...

Share This Page