Service generated warnings while checking SSL certificates

Bloke2

Well-Known Member
Feb 4, 2015
68
2
8
cPanel Access Level
Root Administrator
I am getting the following error email notification "service generated warnings while checking SSL certificates."

I opened a ticket and was advised:
Because your servers hostname does not resolve to an IP, the system is unable to complete checks in order to complete the SSL installation.

In order to address this, the hostname should be updated to a FQDN.

I have changed the host name and still getting this error. I there anything else I can try?
 

Bloke2

Well-Known Member
Feb 4, 2015
68
2
8
cPanel Access Level
Root Administrator
I contacted Godaddy and they said this has been happening on other servers. They just pointed me to the documentation to change the hostname. Should I ignore it?

Also can I delete the old DNS zone after my hostname has changed?
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,917
2,248
363
Hello @Bloke2,

Can you share the output from the below command?

Code:
/usr/local/cpanel/bin/checkallsslcerts --verbose
Ensure to replace real domain names and IP addresses with examples when pasting the output here.

Thank you.
 

Bloke2

Well-Known Member
Feb 4, 2015
68
2
8
cPanel Access Level
Root Administrator
The system will check for the certificate for the “dovecot” service.
The system will attempt to replace the self-signed certificate for the “dovecot” service with a signed certificate from the cPanel Store.
The system will attempt to install a certificate for the “dovecot” service from the system ssl storage.
None of the certificates in the system ssl storage were acceptable to use for the “dovecot” service.
The system will check for the certificate for the “exim” service.
The system will attempt to replace the self-signed certificate for the “exim” service with a signed certificate from the cPanel Store.
The system will attempt to install a certificate for the “exim” service from the system ssl storage.
None of the certificates in the system ssl storage were acceptable to use for the “exim” service.
The system will check for the certificate for the “ftp” service.
The system will attempt to replace the self-signed certificate for the “ftp” service with a signed certificate from the cPanel Store.
The system will attempt to install a certificate for the “ftp” service from the system ssl storage.
None of the certificates in the system ssl storage were acceptable to use for the “ftp” service.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,917
2,248
363
Hello @Bloke2,

Can you verify if the DNS zone associated with the server's hostname makes use of an AAAA record for IPv6? You can view the DNS zone for the server's hostname or the hostname's parent domain in WHM >> Edit DNS Zone.

Thank you.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,917
2,248
363
Feel free to open a support ticket and we'll take a closer look to see why the following error continues to appear after you've updated the server's hostname and it resolves to the correct IP address:

None of the certificates in the system ssl storage were acceptable to use for the “dovecot” service.
You can post the ticket number here once it's opened and I'll link this thread to it.

Thank you.
 

Bloke2

Well-Known Member
Feb 4, 2015
68
2
8
cPanel Access Level
Root Administrator
Feel free to open a support ticket and we'll take a closer look to see why the following error continues to appear after you've updated the server's hostname and it resolves to the correct IP address:



You can post the ticket number here once it's opened and I'll link this thread to it.

Thank you.
Your Support Request ID is: 11858107
 
  • Like
Reactions: cPanelMichael

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,917
2,248
363
Hello,

To update, it looks like the license provider imposes a restriction that prevents the use of the free signed hostname SSL certificate service.

Thank you.