SSL Cert available but installation fails

[Timino]

Certificate installation fails through both manual and AutoSSL methods.

When running AutoSSL with either cPanel/Comodo or Let's Encrypt I get the errors below. Note at the end of each log there is an error similar to

WARN Can't use string ("<hash string was here>"...) as a HASH ref while "strict refs" in use at <file>

...but showing different files. I get a similar error when trying to install the Cert manually.

cPanel/Comodo log:

 12:17:01 AM Polling for “user”’s new certificate for “site.com” (order item ID “******”) …

 12:17:03 AM The certificate is available. The system will now attempt to install it.
 WARN Can't use string ("<hash string was here>"...) as a HASH ref while "strict refs" in use at /usr/local/cpanel/Cpanel/SSLStorage.pm line 1117. ...caught at bin/autossl_check_cpstore_queue.pl line 454.

Let's Encrypt log:

3:09:44 PM Analyzing site.com”’s DCV results …
 3:09:44 PM A CAA record for this provider is already in the DNS for site.com.
 3:09:53 PM “Let’s Encrypt™” HTTP DCV OK: www.site.com
 “Let’s Encrypt™” HTTP DCV OK: site.com
 AutoSSL will request a new certificate.
 3:09:53 PM The system will attempt to renew the SSL certificate for the website (site.com: site.com www.site.com).
 3:09:54 PM WARN Can't use string ("<hash string was here>"...) as a HASH ref while "strict refs" in use at /usr/local/cpanel/Cpanel/SSLStorage.pm line 1117.
 3:09:54 PM The system has completed the AutoSSL check for “user”.

cPanel otherwise seems to be working fine.

Only thing I can find that is even slightly similar is this thread: SOLVED - HASH error while starting cPanel Services

At this point I am unable to renew or install any Certs at all.

I would be grateful for any help in resolving this issue.

/etc/redhat-release:CentOS Linux release 7.6.1810 (Core)
/usr/local/cpanel/version:11.76.0.12
/var/cpanel/envtype:kvm
CPANEL=release

 

[Timino]

After various troubleshooting steps, this has now been resolved. I'll leave our steps here so hopefully someone else will benefit from it.

The issue seems to stem from a lock file in /home/<user>/ssl/. Unfortunately removing the lock file didn't do the trick, so I renamed the /home/<user>/ssl folder to /home/<user>/ssl.old. Upon the next poll of the AutoSSL check, it re-created the folder, added the files that were needed and installed the certificate as normal.

It seems that this may have originated from bad file permissions due to a cPanel migration.

 

[cPanelMichael]

Hello @Timino,

We do have an internal case open (CPANEL-20621) to track reports of corrupted ssl.db files in /home/username/ssl/ causing AutoSSL installation failures. If anyone faces this problem again in the future, please open a support ticket before fixing the problem so we can take a closer look at an affected system. Ensure to reference case number CPANEL-20621 in the support ticket and post the ticket number here once it's opened.

Thank you.