Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

Problems with certificate

Discussion in 'Security' started by techman141102, Jun 13, 2017.

Tags:
  1. techman141102

    techman141102 Registered

    Joined:
    Oct 17, 2016
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Australia
    cPanel Access Level:
    Root Administrator
    I have a certificate problem on my server.
    Cpanel & WHM 64.0 (build 24) on Centos 6.9
    There appears to be an expired certificate still installed and I get 'confirm security exception' messages when sending email from a mail client.
    running the standard online SSL tests return a valid certificate but a specific mailserver test returns the expired certificate, so it appears to only affect SMTP.
    There are no expired certificates visible under the cPanel account login.
    In WHM the current certificate is showing as installed under 'Manage SSL hosts' , and under 'Manage service SSL certificates' the current certificate is showing for the Exim(SMTP) service.
    Help needed, thanks.
     
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,658
    Likes Received:
    1,425
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    Could you verify which email client you are using, and if you are using the domain name or the server's host name in the email client's SMTP settings?

    Thank you.
     
  3. techman141102

    techman141102 Registered

    Joined:
    Oct 17, 2016
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Australia
    cPanel Access Level:
    Root Administrator
    I am using the domain name - 'example.com.au' in the SMTP settings
    If I use Thunderbird it asks to confirm the security exception and then stores it. Outlook does not store the security exception but asks every time you send an email. POP and IMAP work ok.
    The test on ssl-tools.net/mailservers also returns an expired certificate
    Thanks
     
    #3 techman141102, Jun 14, 2017
    Last edited by a moderator: Jun 14, 2017
  4. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    15,766
    Likes Received:
    313
    Trophy Points:
    433
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    The cert for that domain shows me that it expires July 2018.
     
  5. techman141102

    techman141102 Registered

    Joined:
    Oct 17, 2016
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Australia
    cPanel Access Level:
    Root Administrator
    Yes I know. A SSL server check shows a certificate that expires July 2018 and this is what is listed as installed in cPanel and WHM, but a mailserver check such as the one at ssl-tools.net shows a certificate that expires on July 2014 and this is the certificate that the email clients see. As you can see this problem started in 2014 and I gave up trying to resolve it as most email clients are fine once you confirm the security exception but Outlook won't save the exception and it gets really annoying having to confirm the exception for every email sent.
    I am using SSL/TLS on port 465. Forgot to include this previously.

    Below is the information returned from ssl-tools.net

    - Removed -

    Please don't post actual domain names IPs or email addresses. Also, wrapping output in code tags makes things easier to read.
     
    #5 techman141102, Jun 14, 2017
    Last edited by a moderator: Jun 14, 2017
  6. Infopro

    Infopro cPanel Sr. Product Evangelist
    Staff Member

    Joined:
    May 20, 2003
    Messages:
    15,766
    Likes Received:
    313
    Trophy Points:
    433
    Location:
    Pennsylvania
    cPanel Access Level:
    Root Administrator
    Twitter:
    Under the Cert chain section is says:
    Unknown Authority
    Crazy Domains (DV) Certification Authority

    I think I might contact them and ask about this, assuming that's where you purchased the cert.
     
  7. techman141102

    techman141102 Registered

    Joined:
    Oct 17, 2016
    Messages:
    4
    Likes Received:
    0
    Trophy Points:
    1
    Location:
    Australia
    cPanel Access Level:
    Root Administrator
    Yes, that's where I purchased the certificate. Could that be the reason why it is still hanging around on my server ?
     
  8. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    38,658
    Likes Received:
    1,425
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    Feel free to open a support ticket using the link in my signature if you'd like us to take a closer look at the affected system. You can post the ticket number here so we can update this thread with the outcome.

    Thank you.
     
Loading...

Share This Page