SOLVED How long does it take for SSL certificate to be setup?

rpvw

Well-Known Member
Jul 18, 2013
1,101
465
113
UK
cPanel Access Level
Root Administrator
The new domains I added in October were typically taking about 20 to 30 minutes to get the certificates - and never more than an hour. (Via the cPanel/Comodo provider)
 
  • Like
Reactions: cPanelMichael

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,218
463

Dalien

Member
Mar 26, 2016
7
0
51
Quebec
cPanel Access Level
Website Owner
Hi @cPanelMichael ,

Here's the logs :

Code:
16:19:36 AutoSSL’s configured provider is “cPanel (fourni par Comodo.)”.
This AutoSSL provider does not poll for certificate availability immediately after a certificate request submission. Instead, it submits certificate requests then periodically polls the cPanel Store for each requested certificate and installs it after a successful retrieval. The system will record all requests, retrievals, and installations for the current AutoSSL run in this log.
Vérification des sites Web pour « someusr »…
16:19:36 Analyzing “example.com” …
16:19:36 ERREUR TLS Status: Defective
Certificate expiry: 23/10/2019 20:17 UTC (357 days from now)
ERREUR Defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL’s verification (0:18:DEPTH_ZERO_SELF_SIGNED_CERT).
16:19:36 Performing DCV (Domain Control Validation) …
16:19:42 Local HTTP DCV OK: example.com
Local HTTP DCV OK: www.example.com (via example.com)
Local HTTP DCV OK: mail.example.com (via example.com)
Local HTTP DCV OK: cpanel.example.com (via example.com)
Local HTTP DCV OK: webdisk.example.com (via example.com)
Local HTTP DCV OK: webmail.example.com (via example.com)
Local HTTP DCV OK: autodiscover.example.com (via example.com)
Analyzing “example.com”’s DCV results …
16:19:42 AutoSSL will request a new certificate.
16:19:42 The system will attempt to renew the SSL certificate for the website (example.com: example.com www.example.com mail.example.com webmail.example.com cpanel.example.com autodiscover.example.com webdisk.example.com).
The provider “cPanel (fourni par Comodo.)”’s AutoSSL queue already contains a certificate request for “someusr”’s website “example.com”. The request’s start time is 25 oct. 2018 à 02:07:01 UTC, and its last poll time is 31 oct. 2018 à 20:18:54 UTC.
16:19:42 Le système a effectué la vérification AutoSSL pour « someusr ».
 
Last edited by a moderator:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,218
463
Hello @Dalien,

It looks like DCV succeeded and it's in the AutoSSL queue. Can you confirm if it's still queued under Pending Queue in WHM >> Manage AutoSSL at this time?

Thank you.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,904
2,218
463
Hello,

To update, this was the result of firewall rules blocking Comodo's IP addresses over the UDP protocol (the IPs were whitelisted for TCP traffic only and the DNS queries for DCV occur over UDP).

I've marked this thread as solved.

Thanks!