cPanel & WHM update failure in upcp script - scripts/updatesigningkey - update to v86.0.21

[coursevector]

upcp is failing and when I ran it manually I was able to track it back to /scripts/updatesigningkey. When I ran it manually, this is what i got:

[[email protected] ~]# /scripts/updatesigningkey
warn [updatesigningkey] Unable to download public key from vendor: cpanel, category: release, url: https://securedownloads.cpanel.net/cPanelPublicKey.asc
info [updatesigningkey] Error encountered while running 'wget' command.
--2020-05-30 10:12:38--  https://securedownloads.cpanel.net/cPanelPublicKey.asc
Resolving securedownloads.cpanel.net (securedownloads.cpanel.net)... 208.74.121.38
Connecting to securedownloads.cpanel.net (securedownloads.cpanel.net)|208.74.121.38|:443... connected.
ERROR: cannot verify securedownloads.cpanel.net's certificate, issued by '/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA':
  Issued certificate has expired.
To connect to securedownloads.cpanel.net insecurely, use `--no-check-certificate'.
warn [updatesigningkey] Unable to download public key from vendor: cpanel, category: development, url: https://securedownloads.cpanel.net/cPanelDevelopmentKey.asc
info [updatesigningkey] Error encountered while running 'wget' command.
--2020-05-30 10:12:38--  https://securedownloads.cpanel.net/cPanelDevelopmentKey.asc
Resolving securedownloads.cpanel.net (securedownloads.cpanel.net)... 208.74.121.38
Connecting to securedownloads.cpanel.net (securedownloads.cpanel.net)|208.74.121.38|:443... connected.
ERROR: cannot verify securedownloads.cpanel.net's certificate, issued by '/C=GB/ST=Greater Manchester/L=Salford/O=COMODO CA Limited/CN=COMODO RSA Domain Validation Secure Server CA':
  Issued certificate has expired.
To connect to securedownloads.cpanel.net insecurely, use `--no-check-certificate'.
warn [updatesigningkey] Failed to download all specified public keys.

I am able to access https://securedownloads.cpanel.net/cPanelPublicKey.asc in my browser manually, and see that the certificate doesn't expire until 2021, how do I get the server to see that? I've rebooted the server and no dice.

 

[tmcstom]

possibly related to this? https://support.sectigo.com/article...ddTrust-External-CA-Root-Expiring-May-30-2020

 

[cuzzmunger]

I have a similar error:
Maintenance ended; however, it did not exit cleanly (256). The following events were logged: “scripts/updatesigningkey”.
[2020-05-30 23:48:10 +1000] E [/usr/local/cpanel/scripts/updatesigningkey] The “/usr/local/cpanel/scripts/updatesigningkey” command (process 6652) reported error number 1 when it ended.

Any help appreciated.
CENTOS 7.8
v86.0.21

 

[cPanelLauren]

Hello,

There was certainly an issue and this suggestion is correct:

possibly related to this? https://support.sectigo.com/article...ddTrust-External-CA-Root-Expiring-May-30-2020

It is indeed related to this issue.

I'll be updating on this issue further here: In Progress - Sectigo issue but the portion of this issue affecting updates should be resolved now. Can you let us know if you are continuing to experience issues with updates in relation to this issue?

 

[cuzzmunger]

Thank you! Websites are up, mail / imap working but I cant access my webmail :2096

 

[cPanelLauren]

Thank you! Websites are up, mail / imap working but I cant access my webmail :2096

What is the error you receive when trying to access 2096?