Failed to acquire a signed certificate from the cPanel Store

[Flyer]

For the past few days I have been receiving an email reporting the following error:

"The system failed to acquire a signed certificate from the cPanel Store because of the following error: (XID 9g2bvk) The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request “POST ssl/certificate/whm-license/90-day”: We were unable to process your request. Please try again later."

Will this resolve itself, or is there a problem with my server? It is running WHM 102.0.10 on CentOS 7.9.2009 in an Azure VM.

 

[cPRex]

Hey there! This is a long-standing, known issue with the SSL provider and should resolve itself the next time your server checks for the certificate.

 

[Flyer]

I thought that it might be a temporary glitch, but it's been doing this since Saturday, so I decided to ask here about it. I'll report back tomorrow.

 

[cPRex]

It's been temporary on and off since January or so, unfortunately.

 

[Flyer]

No email this morning, so I ran /usr/local/cpanel/bin/checkallsslcerts, just to be sure. Thanks for your explanation.

 

[PeteS]

It's been temporary on and off since January or so, unfortunately.

How about a fix then?

I had a some in June that resolved, and have been having them on various servers since 8/17 two of which still haven't resolved.

-Pete

 

[kodeslogic]

@PeteS

If you need the SSL to be issued immediately, it would be best to switch to the Let's Encrypt provider:

The Let's Encrypt Plugin | cPanel & WHM Documentation

This plugin allows the AutoSSL feature to issue certificates from the Let's Encrypt™ provider.

docs.cpanel.net

 

[PeteS]

@PeteS

If you need the SSL to be issued immediately, it would be best to switch to the Let's Encrypt provider:

The Let's Encrypt Plugin | cPanel & WHM Documentation

This plugin allows the AutoSSL feature to issue certificates from the Let's Encrypt™ provider.

docs.cpanel.net

Unfortunately it is the hostname cert that is hanging up (the LE plugin doesn't do hostname certs). Besides, shouldn't this issue just be fixed?

-Pete

 

[CavicBronx]

Hi all, we are having the same issue on one of our cPanels, when I try and create a new one, I can set AutoSSL with no trouble, but for this one, I still get the same error as the rest.

Is there a limit on how many SSL certs you can have on one cPanel? We currently have 28 domains there (meaning 56 SSLs in total).

 

[cPRex]

@CavicBronx - with those numbers, you should not be reaching any limits. Guide to SSL | cPanel & WHM Documentation

@PeteS - to be clear, all these issues are on the Sectigo side due to ratelimiting on their network. We're looking into some other options, but so far Sectigo hasn't been able (or maybe willing?) to adjust things.

 

[PeteS]

@PeteS - to be clear, all these issues are on the Sectigo side due to ratelimiting on their network. We're looking into some other options, but so far Sectigo hasn't been able (or maybe willing?) to adjust things.

You *are* paying the bill, right? lol But my serious point is, they are not providing a paid service reliably. At what point does cPanel tell them to get it together or take a hike?

I'd gladly move to the LE plugin now, but it's my understanding that it won't do the hostname cert, which is the problem I am seeing. I assume the same is true for others - that it's not a cert(s) on an individual account(s) but the hostname cert tht is not renewing.

 

[cPRex]

You *are* paying the bill, right? lol But my serious point is, they are not providing a paid service reliably. At what point does cPanel tell them to get it together or take a hike?

I really really want to post a reply...........but I really can't. Let's just say certain things are happening and being discussed in the background.

If you absolutely can't get a hostname cert to issue, make a ticket and we'll see if we can do some magic.

 

[PeteS]

I really really want to post a reply...........but I really can't. Let's just say certain things are happening and being discussed in the background.

If you absolutely can't get a hostname cert to issue, make a ticket and we'll see if we can do some magic.

Ironically, /usr/local/cpanel/bin/checkallsslcerts now shows a clean response ("...passed all checks" for cpanel, dovecot, exim, ftp). I checked the date, and the cert is now good for 90 day. (I guess it just needed a little threatening... )

Keep those b/g discussions going.

 

[cPRex]

It probably sensed you were talking to me.