The certificate chain failed OpenSSL’s verification

Sunday Alabi

Member
Jan 29, 2019
7
0
1
Nigeria
cPanel Access Level
Root Administrator
Please am having error when trying to issue certificate for my domain. I have root access and WHM Access. The error message is `ERROR Defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL’s verification`

Code:
3:51:12 PM Analyzing “example.com” …
 3:51:12 PM ERROR TLS Status: Defective
 Certificate expiry: 1/30/20, 8:36 AM UTC (350.74 days from now)
 ERROR Defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL’s verification (0:18:DEPTH_ZERO_SELF_SIGNED_CERT).
 3:51:12 PM Performing DCV (Domain Control Validation) …
 3:51:13 PM WARN Local HTTP DCV error (example.com): The system queried for a temporary file at “http://example.com/.well-known/pki-validation/8835C367CCD201E4A678346F3E12EC64.txt”, but the web server responded with the following error: 404 (Not Found). A DNS (Domain Name System) or web server misconfiguration may exist.
 3:51:14 PM Redirection #1 (www.example.com): http://www.example.com/.well-known/pki-validation/49A7A6C65ED92792055A7177FDA87026.txt → http://example.com:80/
 ERROR “cPanel (powered by Comodo)” forbids DCV HTTP redirections.
 WARN Local HTTP DCV error (www.example.com): The system failed to fetch the DCV (Domain Control Validation) file at “http://www.example.com/.well-known/pki-validation/49A7A6C65ED92792055A7177FDA87026.txt” because of an error: The system failed to send an HTTP (Hypertext Transfer Protocol) “GET” request to “http://www.example.com/.well-known/pki-validation/49A7A6C65ED92792055A7177FDA87026.txt” because of an error: (XID m2jhau) The response exceeded the maximum length (16 KB). (<!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title>Ruff 'N' Tu …) at /usr/local/cpanel/Cpanel/SSL/DCV.pm line 670. .
 3:51:15 PM Redirection #1 (mail.example.com): http://mail.example.com/.well-known/pki-validation/B5836CC6A05BDC0DFD63DA589E86A97A.txt → http://example.com:80/
 ERROR “cPanel (powered by Comodo)” forbids DCV HTTP redirections.
 WARN Local HTTP DCV error (mail.example.com): The system failed to fetch the DCV (Domain Control Validation) file at “http://mail.example.com/.well-known/pki-validation/B5836CC6A05BDC0DFD63DA589E86A97A.txt” because of an error: The system failed to send an HTTP (Hypertext Transfer Protocol) “GET” request to “http://mail.example.com/.well-known/pki-validation/B5836CC6A05BDC0DFD63DA589E86A97A.txt” because of an error: (XID k5a9pg) The response exceeded the maximum length (16 KB). (<!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title>Ruff 'N' Tu …) at /usr/local/cpanel/Cpanel/SSL/DCV.pm line 670. .
 WARN Local HTTP DCV error (cpanel.example.com): “cpanel.example.com” does not resolve to any IP addresses on the internet.
 3:51:16 PM WARN Local HTTP DCV error (webdisk.example.com): “webdisk.example.com” does not resolve to any IP addresses on the internet.
 3:51:17 PM Redirection #1 (webmail.example.com): http://webmail.example.com/.well-known/pki-validation/E2BE356B99351A61BF401C41722DE01D.txt → http://example.com:80/
 ERROR “cPanel (powered by Comodo)” forbids DCV HTTP redirections.
 WARN Local HTTP DCV error (webmail.example.com): The system failed to fetch the DCV (Domain Control Validation) file at “http://webmail.example.com/.well-known/pki-validation/E2BE356B99351A61BF401C41722DE01D.txt” because of an error: The system failed to send an HTTP (Hypertext Transfer Protocol) “GET” request to “http://webmail.example.com/.well-known/pki-validation/E2BE356B99351A61BF401C41722DE01D.txt” because of an error: (XID apcz25) The response exceeded the maximum length (16 KB). (<!DOCTYPE html><html lang="en"><head><meta http-equiv="Content-Type" content="text/html; charset=utf-8" /><title>Ruff 'N' Tu …) at /usr/local/cpanel/Cpanel/SSL/DCV.pm line 670. .
 WARN Local HTTP DCV error (autodiscover.example.com): “autodiscover.example.com” does not resolve to any IP addresses on the internet.
 3:51:24 PM ERROR Local DNS DCV error (example.com): The DNS query to “_cpanel-dcv-test-record.example.com” for the DCV challenge returned no “TXT” record that matches the value “_cpanel-dcv-test-record=dwpN3FQqpDmqFuHd_37l7M6DYREEOQlMXeMr9UnxxhCdLlks5Kt7YmV3HPrn1Ktr”.
 ERROR Local DNS DCV error (www.example.com): The DNS query to “_cpanel-dcv-test-record.example.com” for the DCV challenge returned no “TXT” record that matches the value “_cpanel-dcv-test-record=dwpN3FQqpDmqFuHd_37l7M6DYREEOQlMXeMr9UnxxhCdLlks5Kt7YmV3HPrn1Ktr”.
 ERROR Local DNS DCV error (mail.example.com): The DNS query to “_cpanel-dcv-test-record.example.com” for the DCV challenge returned no “TXT” record that matches the value “_cpanel-dcv-test-record=dwpN3FQqpDmqFuHd_37l7M6DYREEOQlMXeMr9UnxxhCdLlks5Kt7YmV3HPrn1Ktr”.
 ERROR Local DNS DCV error (cpanel.example.com): The DNS query to “_cpanel-dcv-test-record.example.com” for the DCV challenge returned no “TXT” record that matches the value “_cpanel-dcv-test-record=dwpN3FQqpDmqFuHd_37l7M6DYREEOQlMXeMr9UnxxhCdLlks5Kt7YmV3HPrn1Ktr”.
 ERROR Local DNS DCV error (webdisk.example.com): The DNS query to “_cpanel-dcv-test-record.example.com” for the DCV challenge returned no “TXT” record that matches the value “_cpanel-dcv-test-record=dwpN3FQqpDmqFuHd_37l7M6DYREEOQlMXeMr9UnxxhCdLlks5Kt7YmV3HPrn1Ktr”.
 ERROR Local DNS DCV error (webmail.example.com): The DNS query to “_cpanel-dcv-test-record.example.com” for the DCV challenge returned no “TXT” record that matches the value “_cpanel-dcv-test-record=dwpN3FQqpDmqFuHd_37l7M6DYREEOQlMXeMr9UnxxhCdLlks5Kt7YmV3HPrn1Ktr”.
 ERROR Local DNS DCV error (autodiscover.example.com): The DNS query to “_cpanel-dcv-test-record.example.com” for the DCV challenge returned no “TXT” record that matches the value “_cpanel-dcv-test-record=dwpN3FQqpDmqFuHd_37l7M6DYREEOQlMXeMr9UnxxhCdLlks5Kt7YmV3HPrn1Ktr”.
Have tried reissuing severally but the error persists.