Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

Renewing Externally Signed Certificate Question

Discussion in 'Security' started by knightmare, Jul 30, 2018.

Tags:
  1. knightmare

    knightmare Member

    Joined:
    May 31, 2018
    Messages:
    20
    Likes Received:
    2
    Trophy Points:
    3
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Hello ,
    I am using centos .
    I was installed WHM/cpanel on centos .
    I want to renew autossl certificate so tell me how to renew autossl certificate ?
     
  2. Shood

    Shood Well-Known Member

    Joined:
    Aug 12, 2015
    Messages:
    55
    Likes Received:
    10
    Trophy Points:
    83
    Location:
    Middle East
    cPanel Access Level:
    Root Administrator
    So you have an SSL certificate installed on your server and you asking about AutoSSL?
    If your certificate is issued by cPanel inc itself, AutoSSL will attempts to renew it within 15 days of expiration, if you'd like to know your AutoSSL situation browse to WHM -> SSL/TLS ->Manage AutoSSL, there you can see all included/excluded users from AutoSSL, also in Logs tab you can look for the AutoSSL run for all users
     
    knightmare likes this.
  3. vacancy

    vacancy Well-Known Member

    Joined:
    Sep 20, 2012
    Messages:
    210
    Likes Received:
    27
    Trophy Points:
    28
    cPanel Access Level:
    Root Administrator
    Renewal is done automatically for 15 days before the certificate expires.

    Your cpanel license must be active for renewal to be available.
     
    knightmare likes this.
  4. knightmare

    knightmare Member

    Joined:
    May 31, 2018
    Messages:
    20
    Likes Received:
    2
    Trophy Points:
    3
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Hello ,

    Logs tab gave me this ,

    12:35:09 PM AutoSSL’s configured provider is “cPanel (powered by Comodo)”.
    Checking websites for “domain” …
    12:35:09 PM Checking “domain.com” …
    12:35:09 PM ERROR TLS Status: Defective
    ERROR Certificate expiry: 4/19/18, 1:55 PM UTC (101.71 days ago)
    ERROR Defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL’s verification (0:10:CERT_HAS_EXPIRED).
    Issuer: commonName=Let's Encrypt Authority X3, organizationName=Let's Encrypt, countryName=US
    Impediment: CERTIFICATE_IS_EXTERNALLY_SIGNED: The certificate is neither self-signed nor from AutoSSL.
     
  5. sli.studios

    sli.studios Registered

    Joined:
    Jul 14, 2015
    Messages:
    4
    Likes Received:
    1
    Trophy Points:
    3
    Location:
    Miami Beach
    cPanel Access Level:
    Reseller Owner
    ***THIS IS A PRESUMPTION, NOT A VALIDATED SOLUTION AS I AM ABOUT TO TRY THE SAME THING****

    Hello @knightmare, as @Shood mentioned, you'll need to get into WHM to change the setting..

    1. Again, go to: WHM -> SSL/TLS ->Manage AutoSSL
    2. Under the [OPTIONS] tab, Check the box next to "[√] Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates."
      1. According to the Bright Yellow warning message below this option, it will Override any installed Certificates that are expiring, expired or insufficient (attachment). (if you have a valid EV or OV cert installed, go into cPanel > SSL/TLS Status and Exclude from AutoSSL the domain the valid certificate applies to)
    3. Under the [Manage Users] tab, Select the radio button next to (•) Enable AutoSSL for the user(s) you would like AutoSSL to run for
    4. Click the (Run AutoSSL for All Users) button

    Give this a try and see if it works for you.

    ---

    Alternatively, delete the existing certificate from the server and run AutoSSL for the domains. Might be overkill, but sometimes it's good to start fresh. (be sure to download the previous Certificate just in-case)
     

    Attached Files:

  6. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    44,827
    Likes Received:
    1,898
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello @knightmare,

    The information in the previous post is correct. Let us know if that helps.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
  7. knightmare

    knightmare Member

    Joined:
    May 31, 2018
    Messages:
    20
    Likes Received:
    2
    Trophy Points:
    3
    Location:
    India
    cPanel Access Level:
    Root Administrator
    Hello ,

    Thank you :D
     
    cPanelMichael likes this.
Loading...

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Dismiss Notice