Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

SOLVED Re-generate SSL for server hostname?

Discussion in 'Security' started by mvandemar, Jul 31, 2018.

Tags:
  1. mvandemar

    mvandemar Well-Known Member

    Joined:
    Jun 17, 2006
    Messages:
    70
    Likes Received:
    1
    Trophy Points:
    158
    I just finished setting up a new server, but I didn't realize that it had the wrong hostname when I initially set things up, it was vps2.domain.com instead of vps3.domain.com. Is there a way to have it regenerate the server ssl certficate? It's currently set to the wrong domain name, and I don't see an interface for just this. The subdomain is not showing when I go to Manage SSL Hosts, and anything else I see under AutoSSL is just for the individual users and not for the server hostname.

    I re-ran /usr/local/cpanel/bin/checkallsslcerts, but I am guessing it didn't do anything since the vps2 ssl cert is installed, valid, and doesn't expire until July 30, 2019

    Thanks.

    -Michael
     
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,827
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello Michael,

    The /usr/local/cpanel/bin/checkallsslcerts script should run automatically upon changing the server's hostname using WHM >> Change Hostname. Can you ensure the hostname is updated using this option and let me know if the corresponding SSL certificate for the hostname is updated?

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  3. mvandemar

    mvandemar Well-Known Member

    Joined:
    Jun 17, 2006
    Messages:
    70
    Likes Received:
    1
    Trophy Points:
    158
    The hostname was already set to vps3, but I clicked the Update button again. The output log showed that it ran, but there was no reference to checkallsslcerts in that log, just cphulkd, exim, and mysqld. The cert is still showing as the vps2 self signed one.

    -Michael
     
  4. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,827
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    Can you let us know the output upon running the command below?

    Code:
    /usr/local/cpanel/bin/checkallsslcerts --verbose
    Replace references to real domain names with examples.

    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  5. mvandemar

    mvandemar Well-Known Member

    Joined:
    Jun 17, 2006
    Messages:
    70
    Likes Received:
    1
    Trophy Points:
    158
    Code:
    # /usr/local/cpanel/bin/checkallsslcerts --verbose
    The system will check for the certificate for the “cpanel” service.
    The system will attempt to verify that the certificate for the “cpanel” service is still valid using OCSP (Online Certificate Status Protocol).
    The certificate for the “cpanel” service passed all checks.
    The system will check for the certificate for the “dovecot” service.
    The system will attempt to verify that the certificate for the “dovecot” service is still valid using OCSP (Online Certificate Status Protocol).
    The certificate for the “dovecot” service passed all checks.
    The system will check for the certificate for the “exim” service.
    The system will attempt to verify that the certificate for the “exim” service is still valid using OCSP (Online Certificate Status Protocol).
    The certificate for the “exim” service passed all checks.
    The system will check for the certificate for the “ftp” service.
    The system will attempt to verify that the certificate for the “ftp” service is still valid using OCSP (Online Certificate Status Protocol).
    The certificate for the “ftp” service passed all checks.
    No references to any domains.

    -Michael
     
  6. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,827
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello Michael,

    Can you open a support ticket so we can take a closer look at the affected system? You can post the ticket number here and we will link this thread to the ticket.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. mvandemar

    mvandemar Well-Known Member

    Joined:
    Jun 17, 2006
    Messages:
    70
    Likes Received:
    1
    Trophy Points:
    158
  8. mvandemar

    mvandemar Well-Known Member

    Joined:
    Jun 17, 2006
    Messages:
    70
    Likes Received:
    1
    Trophy Points:
    158
    Update: of course as soon as I opened the ticket the correct certificate started showing up. :)

    -Michael
     
  9. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,827
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    I'm glad to see the issue is now solved. It's likely the AutoSSL validation process simply needed a little more time to finish (validation isn't instant).

    Thanks!
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice