SSL certificate can't renew

[psytanium]

Hello,

1 account on my server is unable to renew expired certificate, when checking the Auto SSL logs, i see this error:

10:26:33 AM Analyzing “domain.com” (website) …
10:26:33 AM ERROR TLS Status: Defective
ERROR Certificate expiry: 4/16/23, 12:00 AM UTC (3.35 days ago)
ERROR Defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL’s verification (0:10:CERT_HAS_EXPIRED).

Any recommendation ?

Thanks

 

[cPRex]

Hey there! It sounds like the system may be trying to replace a certificate that wasn't created by AutoSSL. In WHM >> Manage AutoSSL under the "Options" tab, do you have the last box checked next to "Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates" ?

 

[psytanium]

Hey there! It sounds like the system may be trying to replace a certificate that wasn't created by AutoSSL. In WHM >> Manage AutoSSL under the "Options" tab, do you have the last box checked next to "Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates" ?

It's happening everytime an SSL cert expire, it seems the server could not renew the certificates. I have to login to the account's cPanel, uninstall the expired cert and generate / install a new one manually.

Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates. is enabled already.

Thanks for your support,

 

[cPRex]

That's just odd - we'd likely need to see this in action through a ticket to have more details, as it shouldn't be behaving like that.

 

[psytanium]

It was an issue on Sectigo's end. They are working to find a solution to the rate-limiting incoming requests from the cPanel store; I switched to the Let's Encrypt AutoSSL provider.

https://support.cpanel.net/hc/en-us/articles/360050823313-How-to-install-and-enable-the-Let-s-Encrypt-provider-for-AutoSSL

 

[cPRex]

It was an issue on Sectigo's end.

Always is :D - I'm glad you found a good workaround!