Failing to acquire SSL on DNSONLY Server

[nsiamwanda]

Good day --

I am having an issue on my DNSONLY server. I can't seem to get my certificate to renew and fetch from the store, I keep getting the following error:
___
Requesting certificate from cPStore …
The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request “POST ssl/certificate/whm-license/90-day”: We were unable to process your request. Please try again later.
Undoing HTTP DCV setup (/usr/local/apache/htdocs/.well-known/pki-validation/06687130E19CF86241B559AD0CAD9E7F.txt) …
… complete.
Enqueueing undo of DNS DCV setup (CNAME _06687130e19cf86241b559ad0cad9e7f.za-cptnms001.bcity.me) …
Undoing DNS DCV setup …
… done.
[WARN] The system failed to acquire a signed certificate from the cPanel Store because of the following error: (XID 9ketpd) The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request “POST ssl/certificate/whm-license/90-day”: We were unable to process your request. Please try again later.
The system will check for the certificate for the “exim” service.
The system will attempt to replace the self-signed certificate for the “exim” service with a signed certificate from the cPanel Store.
The system will attempt to install a certificate for the “exim” service from the system ssl storage.
None of the certificates in the system ssl storage were acceptable to use for the “exim” service.
___

I have tried the advise on: SOLVED - AutoSSL is failing on service subdomains -- But I am still getting the same error as above, even after renaming the folder as advised in the ticket.

Could someone please assist me as I have run out of options at the moment and the server is currently running a self-signed certificate which gives an error on the browser.

 

[cPRex]

Hey there! There isn't a good workaround for this issue, as the AutoSSL system at Sectigo is just overloaded. Usually this gets issued within 24 hours, but if that doesn't happen, please submit a ticket to our team so we can take a look.

 

[PeteS]

Usually this gets issued within 24 hours

I'm seeing this error...

"The system failed to acquire a signed certificate from the cPanel Store because of the following error: (XID 9z7ydf) The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request “POST ssl/certificate/whm-license/90-day”: We were unable to process your request. Please try again later."

...night after night on my DNS Only servers. Eventually one resolved (issued), the other is still struggling. (So hostnamer requests on other full cPanel servers.)

 

[cPRex]

@PeteS - could you open a ticket for the recurring issue on the DNSOnly system?

 

[PeteS]

@PeteS - could you open a ticket for the recurring issue on the DNSOnly system?

Before I do that, let me correct myself, incase there is a simple solution to it. I apologize for mixing up cert errors; there have been so many lately...

That error was on a full cPanel server (which resolved last night), and on a DNSOnly from 1/6 - 1/10 but finally resolved.

The DNSOnly server that is still failing started giving a <30 notice on 1/6, then since 1/11 has had the following error.

"The system failed to acquire a signed certificate from the cPanel Store because of the following error: The system failed to acquire a signed certificate from the cPanel Store. ({"domain_details":null,"status":"revoked","status_details":null,"status_message":"Stale CSR"})"

 

[cPRex]

That could be something different - can you try this? https://support.cpanel.net/hc/en-us...he-cPanel-store-to-fail-creating-an-SSL-order

 

[PeteS]

That could be something different - can you try this? https://support.cpanel.net/hc/en-us...he-cPanel-store-to-fail-creating-an-SSL-order

Dead link...

 

[cPRex]

Well that's not good...try this

 mv /var/cpanel/hostname_cert_csrs{,.cpbkp} -v

then run the classic:

/usr/local/cpanel/bin/checkallsslcerts

to force another run.

 

[cPRex]

Ah, here's the updated link...I just had bad browser history: https://support.cpanel.net/hc/en-us/articles/9024670124951

 

[PeteS]

Well that's not good...try this

 mv /var/cpanel/hostname_cert_csrs{,.cpbkp} -v

then run the classic:

/usr/local/cpanel/bin/checkallsslcerts

to force another run.

I believe you meant -v (not -v), in case you want to correct for future readers.

Yes, that resolved that error... new error takes one of these forms:

"The response to the HTTP (Hypertext Transfer Protocol) “POST” request from “https://store.cpanel.net/json-api/ssl/certificate/whm-license/90-day” indicated an error (503, Service Unavailable): <html><body><h1>503 Service Una…"

or

"The response to the HTTP (Hypertext Transfer Protocol) “POST” request from “https://store.cpanel.net/json-api/ssl/certificate/whm-license/90-day” indicated an error (504, Gateway Timeout): <html><body><h1>504 Gateway Tim…"

or

"The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request “POST ssl/certificate/whm-license/90-day”: We were unable to process your request. Please try again later."

The 503 error is what I was getting last night when manually running /usr/local/cpanel/bin/checkallsslcerts on a full cPanel server, but it resolved on the next upcp. It had been having the hostname cert issue since 1/9.

I'll give this DNSOnly a little time to sort it out...

 

[PeteS]

I'll give this DNSOnly a little time to sort it out...

It updated on tonight's upcp.