SOLVED [COBRA-13510] Do I need to manually update service SSL certificates on cPanel?

[BlueSteam]

Hi All,

I'm getting notices that the cPanel signed SSL certificates for the services are expiring soon and I just want to pre-empt this before I run in to a problem.

Do I need to manually renew them or will they auto-renew?

I know I have the option of clicking "Reset Certificate" under "Manage Service SSL Certificates" but that will install a self-signed certificate according to the warning right before you proceed as well as the cPanel documentation and I don't want that. Why anyone would want a self-signed on a cPanel server I really don't know.

Anyway, Do I need to manually do it or will it automatically renew like AutoSSL does for the domains?

If I do need to do it manually, how do I go about forcing an update on the certificates for a cPanel signed certificate?

I appreciate the replies.

 

[quietFinn]

Anyway, Do I need to manually do it or will it automatically renew like AutoSSL does for the domains?

It will renew automatically.

 

[BlueSteam]

Do you know if it renews 5days before? or 30 days before?? because it says there are 18days left before it expires and Im just wondering when it happens.

 

[quietFinn]

I can't remember that, but I know that for our servers the Service SSL Certificates has been renewed automatically without problems for years.
You can find more information here:

Manage Service SSL Certificates | cPanel & WHM Documentation

This interface allows you to manage certificates for your server's services.

docs.cpanel.net

 

[BlueSteam]

Thank you so much Finn I will keep an eye on it but at least you have set my mind at ease.

 

[quietFinn]

cPanel will renew the certificate if there is not anything that prevents it from doing it.

 

[BlueSteam]

I hope cPanel will notify me if it fails to update the cert so that I can handle the problem.

 

[cPanelAnthony]

Hello! It's possible to configure notifications for service SSL issues such as the certs expiring or a failure occurring.

Contact Manager | cPanel & WHM Documentation

This interface allows you to specify when your server sends notifications for each communication type. You can also specify whether you want to receive notifications of different importance levels.

docs.cpanel.net

 

[BlueSteam]

So I woke up this morning and received a bunch of these for all the services.

It is prompting me to act and update the certificates but everyone here tells me it will do it automatically?? Do I still just leave it and wait??

 

[cPanelAnthony]

Hello! They should renew automatically. If you receive another notification about them expiring after this one, please let us know or open a support ticket using the link in my signature.

 

[BlueSteam]

Thanks Anthony. I will let you know if it is a problem.

 

[Metro2]

I get those same notices for services such as "The SSL (Secure Sockets Layer) certificate for “cpanel” on “hostname.example.com” will expire in less than 30 days" at the end of October every year as well since 2017, and so far they have automatically renewed every year without any problems.

 

[BlueSteam]

Thanks Metro. What I would like to know is when they get renewed before expiry because I've been getting these notices everyday now and I don't want to pester anyone in case they will just autorenew. So I'm waiting until at least 7 days before I make more noise about it.

 

[cPanelAnthony]

Hello again! I believe the following article should be of great help to you.

How often does AutoSSL attempt to renew expiring certs

 

[BlueSteam]

Thank you @cPanelAnthony but today marks another day where I received the warnings of the service SSLs expiring.

According to the article, AutoSSL renews cPanel certificates 15 days before expiry. My certificates expire on the 14th of this month which means AutoSSL has not done it's job.

Should I be concerned??

 

[cPanelAnthony]

Hello! It is likely that AutoSSL will still run. However, would you be able to open a ticket with your web hosting provider to review the AutoSSL logs? They should be able to open ticket directly with cPanel if needed as well.

 

[BlueSteam]

I am the admin of the cPanel server. I have full root access. The server is my own. Where are the logs and what should I be looking for?

 

[cPanelAnthony]

My apologies! I misread your access level. You can open a ticket with cPanel directly via the link in my signature. Otherwise, you will want to review the AutoSSL logs to see what error output shows when an SSL attempts to install on the domain. This article should help you find them.

Where are the AutoSSL Logs Stored

 

[BlueSteam]

But these are for the service SSLs. Not for any domain as an account on the server.

 

[cPanelAnthony]

Hello again! Understood, my apologies for the confusion. Could you please open a support ticket using the link in my signature? Once done, please update me with the ticket ID. I believe this would warrant some investigation.