Please whitelist cPanel in your adblocker so that you’re able to see our version release promotions, thanks!

The Community Forums

Interact with an entire community of cPanel & WHM users!

The AutoSSL certificate renewal may cause a reduction of coverage

Discussion in 'Security' started by Bloke2, Dec 22, 2017.

Tags:
  1. Bloke2

    Bloke2 Well-Known Member

    Joined:
    Feb 4, 2015
    Messages:
    58
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    I received the fallowing email titled "The AutoSSL certificate renewal may cause a reduction of coverage". Is this something I should be concerned with? I have 4 other sites on the server and did not get an email about those. Is this because I have a redirect on this website?

    Code:
    The “cPanel” AutoSSL provider could [B]not[/B] renew the SSL certificate without a reduction of coverage because of the following problems:
The system failed to fetch the DCV (Domain Control Validation)

The system failed to send an HTTP (Hypertext Transfer Protocol) “GET” request to “example.com/.well-known/pki-validation/7BA0FF751F8CD93D91833B643B8C6B01.txt” because of an error: Size of response body exceeds the maximum allowed of 16384

mail.example.com
     
    #1 Bloke2, Dec 22, 2017
    Last edited by a moderator: Dec 22, 2017
  2. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,197
    Likes Received:
    1,936
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    It's possible a redirect rule is directing requests to the DCV file to another file that exceeds the 16-KiB response limit. Are any rewrite rules configured for this domain name doing that? If so, try modifying them to exclude requests to the "domain.tld/.well-known/pki-validation/XXXXXXX.txt" path.

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #2 cPanelMichael, Dec 22, 2017
  3. Bloke2

    Bloke2 Well-Known Member

    Joined:
    Feb 4, 2015
    Messages:
    58
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    I removed the rewrite rule for the domain. I ran the AutoSSL and was able to get it to renew. Now it says
    mail.mywebsite.net” does not resolve to any IPv4 addresses on the internet.
     
    #3 Bloke2, Jan 2, 2018
  4. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,197
    Likes Received:
    1,936
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    Hello,

    Does the mail subdomain resolve to the IP address associated with the cPanel account, or is it pointed to another server?

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #4 cPanelMichael, Jan 2, 2018
  5. Bloke2

    Bloke2 Well-Known Member

    Joined:
    Feb 4, 2015
    Messages:
    58
    Likes Received:
    0
    Trophy Points:
    6
    cPanel Access Level:
    Root Administrator
    There are two MX records pointing to another server.
     
    #5 Bloke2, Jan 2, 2018
  6. cPanelMichael

    cPanelMichael Technical Support Community Manager
    Staff Member

    Joined:
    Apr 11, 2011
    Messages:
    45,197
    Likes Received:
    1,936
    Trophy Points:
    363
    cPanel Access Level:
    Root Administrator
    Twitter:
    The MX records shouldn't matter. What about the DNS record for the "mail" subdomain?

    Thank you.
     
    Stop hovering to collapse... Click to collapse... Hover to expand... Click to expand...
    #6 cPanelMichael, Jan 3, 2018
(You must log in or sign up to post here.)
Loading...
Similar Threads - AutoSSL certificate renewal
  1. spaceman

    SOLVED The AutoSSL certificate renewal may cause a reduction of coverage

    spaceman, Dec 10, 2017, in forum: Security
    Replies:
    4
    Views:
    3,340
    spaceman
    Dec 18, 2017
  2. Morrigan

    AutoSSL - no key in your account matches the given certificate

    Morrigan, Nov 14, 2018 at 11:57 AM, in forum: Security
    Replies:
    4
    Views:
    10
    Morrigan
    Nov 14, 2018 at 2:05 PM
  3. DennisMidjord

    [CPANEL-23825] AutoSSL trying to setup certificate for domain that no longer exists

    DennisMidjord, Nov 7, 2018, in forum: Security
    Replies:
    8
    Views:
    184
    cPanelMichael
    Nov 8, 2018
  4. nick122147

    Changing from multi domain certificate to AutoSSL question

    nick122147, Nov 7, 2018, in forum: Security
    Replies:
    3
    Views:
    67
    cPanelMichael
    Nov 7, 2018
  5. leonep

    Use AutoSSL certificate on another server?

    leonep, Oct 29, 2018, in forum: Security
    Replies:
    1
    Views:
    74
    cPanelMichael
    Oct 29, 2018

Share This Page

  1. This site uses cookies to help personalise content, tailor your experience and to keep you logged in if you register.
    By continuing to use this site, you are consenting to our use of cookies.
    Accept Learn More...
    Dismiss Notice