Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

How long after account creation do you have to wait to run AutoSSL?

Discussion in 'Security' started by rinkleton, Jun 4, 2018.

  1. rinkleton

    rinkleton Well-Known Member

    Joined:
    Jul 16, 2015
    Messages:
    97
    Likes Received:
    3
    Trophy Points:
    8
    Location:
    Cleveland
    cPanel Access Level:
    Root Administrator
    I'm using the APIs to to my account creation. I create the account, create some addon domains, exclude a few domains from AutoSSL, etc. At the very end I trigger AutoSSL to run. I know for sure there is 1 domain that will pass DCV, so it should have no problem issuing the SSL.

    When I have Let's Encrypt set as the provider, in the logs it shows:

    The system queried for a temporary file at “http://example.com/.well-known/acme-challenge/LGV3ZMTFZFXCW8ZTTJSD9XP5Z_IFG56Q”, but the web server responded with the following error: 404 (Not Found). A DNS (Domain Name System) or web server misconfiguration may exist.

    When using Comodo, it doesn't give that error, but just seems like it fails. It's been almost a week and they still haven't been issued.

    I notice that even when manually triggering it, a few minutes later it is automatically triggered for that user. I can also manually trigger it a few minutes later and it issues the right away (with Let's Encrypt). With Comodo it seems like it will never issue.

    The reason I'm interested in manually triggering it is because Comodo takes significantly long to issue, so on initial setup, I want to use Let's Encrypt. However I have run into rate limits with this, so I want to use Comodo for renewals (since issuing speed isn't an issue then).
     
  2. cPanelLauren

    cPanelLauren Forums Analyst II
    Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    3,838
    Likes Received:
    275
    Trophy Points:
    193
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    Hi @rinkleton

    There really isn't a specific time frame in which we can tell you it takes x minutes before you can run the AutoSSL check. Pending the domain has propagated to the server the DCV check for either provider should complete.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. rinkleton

    rinkleton Well-Known Member

    Joined:
    Jul 16, 2015
    Messages:
    97
    Likes Received:
    3
    Trophy Points:
    8
    Location:
    Cleveland
    cPanel Access Level:
    Root Administrator
    There definitely is a delay. After creating an account, maybe 10 seconds later I started AutoSSL for the new user. I get the failure. I ran it again 16 seconds later and it was successful. Then 74 seconds later, the automatic AutoSSL run for the user was triggered.

    I know there isn't a set time, but something is happening later that permits it to work. Maybe a delayed DNS server restart or something?
     
  4. cPanelLauren

    cPanelLauren Forums Analyst II
    Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    3,838
    Likes Received:
    275
    Trophy Points:
    193
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. rinkleton

    rinkleton Well-Known Member

    Joined:
    Jul 16, 2015
    Messages:
    97
    Likes Received:
    3
    Trophy Points:
    8
    Location:
    Cleveland
    cPanel Access Level:
    Root Administrator
    Ah nice. Exactly what I was looking for. A manual httpd restart did the trick. Thanks.
     
  6. cPanelLauren

    cPanelLauren Forums Analyst II
    Staff Member

    Joined:
    Nov 14, 2017
    Messages:
    3,838
    Likes Received:
    275
    Trophy Points:
    193
    Location:
    Houston
    cPanel Access Level:
    DataCenter Provider
    I'm glad to hear that information helped!

    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice