SSL Cert available but installation fails

Timino

Registered
Dec 11, 2018
2
0
1
Melbourne, Australia
cPanel Access Level
Root Administrator
Certificate installation fails through both manual and AutoSSL methods.

When running AutoSSL with either cPanel/Comodo or Let's Encrypt I get the errors below. Note at the end of each log there is an error similar to
Code:
WARN Can't use string ("<hash string was here>"...) as a HASH ref while "strict refs" in use at <file>
...but showing different files. I get a similar error when trying to install the Cert manually.

cPanel/Comodo log:
Code:
 12:17:01 AM Polling for “user”’s new certificate for “site.com” (order item ID “******”) …

 12:17:03 AM The certificate is available. The system will now attempt to install it.
 WARN Can't use string ("<hash string was here>"...) as a HASH ref while "strict refs" in use at /usr/local/cpanel/Cpanel/SSLStorage.pm line 1117. ...caught at bin/autossl_check_cpstore_queue.pl line 454.
Let's Encrypt log:
Code:
3:09:44 PM Analyzing site.com”’s DCV results …
 3:09:44 PM A CAA record for this provider is already in the DNS for site.com.
 3:09:53 PM “Let’s Encrypt™” HTTP DCV OK: www.site.com
 “Let’s Encrypt™” HTTP DCV OK: site.com
 AutoSSL will request a new certificate.
 3:09:53 PM The system will attempt to renew the SSL certificate for the website (site.com: site.com www.site.com).
 3:09:54 PM WARN Can't use string ("<hash string was here>"...) as a HASH ref while "strict refs" in use at /usr/local/cpanel/Cpanel/SSLStorage.pm line 1117.
 3:09:54 PM The system has completed the AutoSSL check for “user”.
cPanel otherwise seems to be working fine.

Only thing I can find that is even slightly similar is this thread: SOLVED - HASH error while starting cPanel Services

At this point I am unable to renew or install any Certs at all.

I would be grateful for any help in resolving this issue.

/etc/redhat-release:CentOS Linux release 7.6.1810 (Core)
/usr/local/cpanel/version:11.76.0.12
/var/cpanel/envtype:kvm
CPANEL=release
 

Timino

Registered
Dec 11, 2018
2
0
1
Melbourne, Australia
cPanel Access Level
Root Administrator
After various troubleshooting steps, this has now been resolved. I'll leave our steps here so hopefully someone else will benefit from it.

The issue seems to stem from a lock file in /home/<user>/ssl/. Unfortunately removing the lock file didn't do the trick, so I renamed the /home/<user>/ssl folder to /home/<user>/ssl.old. Upon the next poll of the AutoSSL check, it re-created the folder, added the files that were needed and installed the certificate as normal.

It seems that this may have originated from bad file permissions due to a cPanel migration.
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,909
2,225
463
Hello @Timino,

We do have an internal case open (CPANEL-20621) to track reports of corrupted ssl.db files in /home/username/ssl/ causing AutoSSL installation failures. If anyone faces this problem again in the future, please open a support ticket before fixing the problem so we can take a closer look at an affected system. Ensure to reference case number CPANEL-20621 in the support ticket and post the ticket number here once it's opened.

Thank you.