The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

How to change an expired SSL certificate to AutoSSL

Discussion in 'Security' started by nickwuk, Mar 24, 2017.

  1. nickwuk

    nickwuk Member

    Joined:
    Jul 18, 2009
    Messages:
    17
    Likes Received:
    1
    Trophy Points:
    53
    How do I change an expired GlobalSign SSL certificate to use AutoSSL (other domains are already using AutoSSL on the same server)?
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,029
    Likes Received:
    1,277
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    You can browse to "WHM >> Manage AutoSSL" and use the "Manage Users" tab to verify AutoSSL is enabled for the account. If the existing certificate is expired, you may want to remove it via "WHM >> Manage SSL Hosts", or consider enabling the "Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates" option under the "Options" tab in "WHM >> Manage AutoSSL".

    Thank you.
     
    linux4me2 likes this.
  3. nickwuk

    nickwuk Member

    Joined:
    Jul 18, 2009
    Messages:
    17
    Likes Received:
    1
    Trophy Points:
    53
    Thank you for these instructions. In "WHM >> Manage AutoSSL" and use the "Manage Users" all domains are set to "Reset to Feature List Setting" (rather than "Enable AutoSSL") and AutoSSL is working for the other domains. I have now ticked the box for "Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates" option under the "Options" tab in "WHM >> Manage AutoSSL", but that's not made any change to the particular domain which still show a not secure warning

    If I delete the SSL Host for the one domain in "WHM >> Manage SSL Hosts" do I then need to recreate the SSLHost manually?
     
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,029
    Likes Received:
    1,277
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    No, AutoSSL will automatically do this when it generates the new certificate. It's possible the domain validation is failing. Check the "Logs" tab in "WHM >> Manage AutoSSL" to see if the most recent log references the domain name with the expired certificate.

    Thank you.
     
    linux4me2 likes this.
  5. nickwuk

    nickwuk Member

    Joined:
    Jul 18, 2009
    Messages:
    17
    Likes Received:
    1
    Trophy Points:
    53
    Yes the log in Manage AutoSSL > Logs tab does reference the account name in the last action, and it IS now showing as secure in Firefox (Chrome is refusing to update it's cache - maybe tomorrow!).

    What triggers AutoSSL to generate the new certificate?
     
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,029
    Likes Received:
    1,277
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    This happens via the "/usr/local/cpanel/bin/checkallsslcerts" script during the nightly upcp maintenance, or when manually running the following command:

    Code:
    /usr/local/cpanel/bin/autossl_check --user $username
    Note that Comodo can sometimes take a few hours to validate the domain name and issue the certificate.

    Thank you.
     
    linux4me2 likes this.
  7. nickwuk

    nickwuk Member

    Joined:
    Jul 18, 2009
    Messages:
    17
    Likes Received:
    1
    Trophy Points:
    53
    I assume this command is run by the button [Check 'username'] under "Manage Users".

    Many thanks!
     
  8. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    37,029
    Likes Received:
    1,277
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Yes, that's correct.

    Thank you.
     
    linux4me2 likes this.
Loading...

Share This Page