SOLVED Do I need to manually update service SSL certificates on cPanel?

Operating System & Version
AlmaLinux 8.4
cPanel & WHM Version
98.0.10

BlueSteam

Well-Known Member
Feb 21, 2013
110
16
68
cPanel Access Level
Reseller Owner
Hi All,

I'm getting notices that the cPanel signed SSL certificates for the services are expiring soon and I just want to pre-empt this before I run in to a problem.

Do I need to manually renew them or will they auto-renew?

I know I have the option of clicking "Reset Certificate" under "Manage Service SSL Certificates" but that will install a self-signed certificate according to the warning right before you proceed as well as the cPanel documentation and I don't want that. Why anyone would want a self-signed on a cPanel server I really don't know.

Anyway, Do I need to manually do it or will it automatically renew like AutoSSL does for the domains?

If I do need to do it manually, how do I go about forcing an update on the certificates for a cPanel signed certificate?

I appreciate the replies.
 

BlueSteam

Well-Known Member
Feb 21, 2013
110
16
68
cPanel Access Level
Reseller Owner
Do you know if it renews 5days before? or 30 days before?? because it says there are 18days left before it expires and Im just wondering when it happens.
 

quietFinn

Well-Known Member
Feb 4, 2006
1,394
181
193
Finland
cPanel Access Level
Root Administrator
I can't remember that, but I know that for our servers the Service SSL Certificates has been renewed automatically without problems for years.
You can find more information here:
 
  • Like
Reactions: BlueSteam

quietFinn

Well-Known Member
Feb 4, 2006
1,394
181
193
Finland
cPanel Access Level
Root Administrator
cPanel will renew the certificate if there is not anything that prevents it from doing it.
 
  • Like
Reactions: BlueSteam

cPanelAnthony

Administrator
Staff member
Oct 18, 2021
625
59
103
Houston, TX
cPanel Access Level
Root Administrator
Hello! It's possible to configure notifications for service SSL issues such as the certs expiring or a failure occurring.

 

BlueSteam

Well-Known Member
Feb 21, 2013
110
16
68
cPanel Access Level
Reseller Owner
So I woke up this morning and received a bunch of these for all the services.

It is prompting me to act and update the certificates but everyone here tells me it will do it automatically?? Do I still just leave it and wait??

Screenshot_20211028_073426.jpg
 

Metro2

Well-Known Member
May 24, 2006
530
76
178
USA
cPanel Access Level
Root Administrator
I get those same notices for services such as "The SSL (Secure Sockets Layer) certificate for “cpanel” on “hostname.example.com” will expire in less than 30 days" at the end of October every year as well since 2017, and so far they have automatically renewed every year without any problems.
 

BlueSteam

Well-Known Member
Feb 21, 2013
110
16
68
cPanel Access Level
Reseller Owner
Thanks Metro. What I would like to know is when they get renewed before expiry because I've been getting these notices everyday now and I don't want to pester anyone in case they will just autorenew. So I'm waiting until at least 7 days before I make more noise about it.
 

BlueSteam

Well-Known Member
Feb 21, 2013
110
16
68
cPanel Access Level
Reseller Owner
Thank you @cPanelAnthony but today marks another day where I received the warnings of the service SSLs expiring.

According to the article, AutoSSL renews cPanel certificates 15 days before expiry. My certificates expire on the 14th of this month which means AutoSSL has not done it's job.

Should I be concerned??
 

BlueSteam

Well-Known Member
Feb 21, 2013
110
16
68
cPanel Access Level
Reseller Owner
I am the admin of the cPanel server. I have full root access. The server is my own. Where are the logs and what should I be looking for?
 

cPanelAnthony

Administrator
Staff member
Oct 18, 2021
625
59
103
Houston, TX
cPanel Access Level
Root Administrator
My apologies! I misread your access level. You can open a ticket with cPanel directly via the link in my signature. Otherwise, you will want to review the AutoSSL logs to see what error output shows when an SSL attempts to install on the domain. This article should help you find them.

Where are the AutoSSL Logs Stored