Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!
  1. This site uses cookies. By continuing to use this site, you are agreeing to our use of cookies. Learn More.

The AutoSSL certificate renewal may cause a reduction of coverage

Discussion in 'Security' started by Bloke2, Dec 22, 2017.

Tags:
  1. Bloke2

    Bloke2 Well-Known Member

    Joined:
    Feb 4, 2015
    Messages:
    49
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    I received the fallowing email titled "The AutoSSL certificate renewal may cause a reduction of coverage". Is this something I should be concerned with? I have 4 other sites on the server and did not get an email about those. Is this because I have a redirect on this website?

    Code:
    The “cPanel” AutoSSL provider could [B]not[/B] renew the SSL certificate without a reduction of coverage because of the following problems:
The system failed to fetch the DCV (Domain Control Validation)

The system failed to send an HTTP (Hypertext Transfer Protocol) “GET” request to “example.com/.well-known/pki-validation/7BA0FF751F8CD93D91833B643B8C6B01.txt” because of an error: Size of response body exceeds the maximum allowed of 16384

mail.example.com
     
    #1 Bloke2, Dec 22, 2017
    Last edited by a moderator: Dec 22, 2017
  2. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,802
    Likes Received:
    1,714
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    It's possible a redirect rule is directing requests to the DCV file to another file that exceeds the 16-KiB response limit. Are any rewrite rules configured for this domain name doing that? If so, try modifying them to exclude requests to the "domain.tld/.well-known/pki-validation/XXXXXXX.txt" path.

    Thank you.
     
    #2 cPanelMichael, Dec 22, 2017
  3. Bloke2

    Bloke2 Well-Known Member

    Joined:
    Feb 4, 2015
    Messages:
    49
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    I removed the rewrite rule for the domain. I ran the AutoSSL and was able to get it to renew. Now it says
    mail.mywebsite.net” does not resolve to any IPv4 addresses on the internet.
     
    #3 Bloke2, Jan 2, 2018
  4. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,802
    Likes Received:
    1,714
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Hello,

    Does the mail subdomain resolve to the IP address associated with the cPanel account, or is it pointed to another server?

    Thank you.
     
    #4 cPanelMichael, Jan 2, 2018
  5. Bloke2

    Bloke2 Well-Known Member

    Joined:
    Feb 4, 2015
    Messages:
    49
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    There are two MX records pointing to another server.
     
    #5 Bloke2, Jan 2, 2018
  6. cPanelMichael

    cPanelMichael Forums Analyst
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    42,802
    Likes Received:
    1,714
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    The MX records shouldn't matter. What about the DNS record for the "mail" subdomain?

    Thank you.
     
    #6 cPanelMichael, Jan 3, 2018
(You must log in or sign up to post here.)
Loading...
Similar Threads - AutoSSL certificate renewal
  1. spaceman

    SOLVED The AutoSSL certificate renewal may cause a reduction of coverage

    spaceman, Dec 10, 2017, in forum: Security
    Replies:
    4
    Views:
    2,183
    spaceman
    Dec 18, 2017
  2. willkruss

    Apache not serving new certificates after AutoSSL

    willkruss, Apr 24, 2018 at 8:06 PM, in forum: Security
    Replies:
    5
    Views:
    66
    cPanelLauren
    Apr 26, 2018 at 6:57 AM
  3. rivali

    AutoSSL failed to request SSL certificate Permission Denied

    rivali, Apr 22, 2018 at 5:13 PM, in forum: Security
    Replies:
    24
    Views:
    178
    cPanelLauren
    Apr 25, 2018 at 6:57 AM
  4. ericleonardo

    AutoSSL doesn't renew certificate if cPanel license is expired

    ericleonardo, Mar 27, 2018, in forum: Security
    Replies:
    5
    Views:
    287
    ericleonardo
    Mar 28, 2018
  5. Bdzzld

    AutoSSL for Server certificate

    Bdzzld, Mar 9, 2018, in forum: Security
    Replies:
    3
    Views:
    125
    cPanelMichael
    Mar 9, 2018

Share This Page