Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

cabundle missing

Discussion in 'Security' started by mrcbrown, Sep 30, 2017.

Tags:
  1. mrcbrown

    mrcbrown Well-Known Member

    Joined:
    Jun 5, 2003
    Messages:
    100
    Likes Received:
    1
    Trophy Points:
    168
    I just finished moving a set of servers and a very odd thing is happening, cabundles are just randomly (or so it seems) disappearing and breaking Apache.

    I had the Let's Encrypt for cPanel plugin which had provisioned for customers previously was installed, but even it's CA was missing - I've uninstalled the Let's Encrypt Plugin for now, one less thing in the mess.

    Any suggestions on getting CA's back so I am not hit with random outages as AutoSSL or Apache kicks over?
     
    #1 mrcbrown, Sep 30, 2017
  2. mrcbrown

    mrcbrown Well-Known Member

    Joined:
    Jun 5, 2003
    Messages:
    100
    Likes Received:
    1
    Trophy Points:
    168
    Just got a note that Apache is down again, and cabundle folders are missing bundles again!

    Code:
    restartsrv_httpd[596]: SSLCACertificateFile: file '/var/cpanel/ssl/installed/cabundles/cPanel_Inc__681917bfb43af6b642178607e0b36ccc_1747526399.cabundle' does not exist or is empty
    I can re-create these from a valid CA, however, they simply get cleared again when AutoSSL or something finishing running. :-(
     
    #2 mrcbrown, Sep 30, 2017
  3. 24x7server

    24x7server Well-Known Member

    Joined:
    Apr 17, 2013
    Messages:
    1,888
    Likes Received:
    90
    Trophy Points:
    78
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Hi,

    I think you may have to rebuild the http conf... You can follow the below link, in which the same thing has been discussed.
    Lets encrypt issues
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #3 24x7server, Oct 1, 2017
  4. mrcbrown

    mrcbrown Well-Known Member

    Joined:
    Jun 5, 2003
    Messages:
    100
    Likes Received:
    1
    Trophy Points:
    168
    Sadly that's a no go because httpd conf is broken, and since that file is not anywhere - nor any other CAbundle, its no go.
     
    #4 mrcbrown, Oct 1, 2017
  5. 24x7server

    24x7server Well-Known Member

    Joined:
    Apr 17, 2013
    Messages:
    1,888
    Likes Received:
    90
    Trophy Points:
    78
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Hi,

    Try removing the SSL certificate installed on the hostname and services once and renew it through AutoSSL. Check if it rebuilds it..
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #5 24x7server, Oct 2, 2017
  6. mrcbrown

    mrcbrown Well-Known Member

    Joined:
    Jun 5, 2003
    Messages:
    100
    Likes Received:
    1
    Trophy Points:
    168
    I tried that then it'd hit another one from the old server which had an SSL as well. I did get a solution that seems to of held thus far and I was going to post it which is:

    I went to the old server, copied the cabundle folder including the symbolic links and brought them over, didn't have a crash since the addition, but I'll post tomorrow if it has any issues - if so I can provide the cabundle tgz if anyone needs it with a similar issue.
     
    #6 mrcbrown, Oct 2, 2017
  7. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,183
    Likes Received:
    1,936
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    Feel free to open a support ticket using the link in my signature if you'd like us to take a closer look to see why the AutoSSL feature isn't automatically installing new certificates for the domain names on the system.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #7 cPanelMichael, Oct 4, 2017
  8. mrcbrown

    mrcbrown Well-Known Member

    Joined:
    Jun 5, 2003
    Messages:
    100
    Likes Received:
    1
    Trophy Points:
    168
    I think I fixed it by simply copying the CA Bundle folder from another cPanel server, just odd the migrated accounts didn't restore the bundles for the various certificates. I'd be happy to include the tgz I made - but maybe make a /scripts/fixbundles :-D and rebuild the require CA bundles. If I can provide anything though to review please let me know! I can open a ticket if you think this transfer version has a bug related to the bundles.
     
    #8 mrcbrown, Oct 4, 2017
  9. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,183
    Likes Received:
    1,936
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    We have an internal case open (CPANEL-2478) that would add functionality to include the CABundle as part of the data that's packaged for an account. There's no time frame on when this functionality will be added, but I'll monitor the case and update this thread with new information as it becomes available.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #9 cPanelMichael, Oct 4, 2017
  10. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,183
    Likes Received:
    1,936
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    To update, the internal case was closed as it was not reproducible as of cPanel version 68.0.26.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #10 cPanelMichael, Jan 18, 2018
(You must log in or sign up to post here.)
Loading...
Similar Threads - cabundle missing
  1. Jaanus Nurmoja

    Append additional certificates to cabundle?

    Jaanus Nurmoja, Nov 16, 2017, in forum: Security
    Replies:
    1
    Views:
    197
    cPWilliamL
    Nov 17, 2017
  2. Havri

    cabundle.cpanel.net did not have any working mirrors

    Havri, May 3, 2017, in forum: Security
    Replies:
    14
    Views:
    1,649
    cPanelMichael
    May 31, 2017
  3. mindnetcombr

    SOLVED WHM Terminal missing on VPS

    mindnetcombr, Nov 14, 2018 at 10:13 AM, in forum: General Discussion
    Replies:
    3
    Views:
    23
    mindnetcombr
    Nov 14, 2018 at 11:02 AM
  4. masterross

    Account is missing

    masterross, Nov 5, 2018, in forum: General Discussion
    Replies:
    4
    Views:
    73
    GentleMan
    Nov 8, 2018
  5. Nirjonadda

    In Progress [CPANEL-23606] cPanel Security Advisor missing kernel information when kernelcare is installed

    Nirjonadda, Oct 19, 2018, in forum: General Discussion
    Replies:
    10
    Views:
    152
    cPanelLauren
    Oct 24, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice