updated and now ssl not working

keat63

Well-Known Member
Nov 20, 2014
1,913
259
113
cPanel Access Level
Root Administrator
Last night, I preformed a Yum update, a Cpanel update and update to EA4.
This morning one of my sites is giving SSL errors.

Whilst the site appears to be https, emails are failing on port 465 with 'The certificates CN name does not match the passed value'

This is a Comodo certificate, purchased before CPanel started issuing built in ones.
I didn't have this issue before last night.
Any ideas please ?
 

keat63

Well-Known Member
Nov 20, 2014
1,913
259
113
cPanel Access Level
Root Administrator
I found that changing the smtp outgoing server from mail.domain.com to domain.com resolved the issue.
I've no idea why it would have stopped working after the updates though ??
 

ChrisI

Technical Analyst II
Mar 24, 2014
67
12
83
cPanel Access Level
Root Administrator
Hello,

In more recent version of cPanel, the SSL certificates began including the mail subdomain, which caused those to also be added to the specific vhosts and use the SSLs for the domains. If the SSL you have installed on the domain doesn't include the mail subdomain as part of the certificate's domains, then that could cause what you are seeing. That shouldn't occur if you are using AutoSSL certificates. Were you using those or 3rd party certificates? Does the certificate cover mail.domain.com as well?

Thanks!
 

keat63

Well-Known Member
Nov 20, 2014
1,913
259
113
cPanel Access Level
Root Administrator
I'm not overly sure to be honest. Looking at my setup email from Comodo 2 years ago, it states that it covers www.domain.com and domian.com.
no mention of mail.domain.com.

The other sites are utilising the ones issued by cpanel, and appear to be unaffected.

Since changing the email clients I'm no longer seeing the error, so I'm more than happy to leave it this way.
Rather intrugued why it stopped over night though.
 

ChrisI

Technical Analyst II
Mar 24, 2014
67
12
83
cPanel Access Level
Root Administrator
I'm glad that's working now. If you'd like for us to look into what caused that to change, feel free to open up a ticket at cPanel Customer Portal and we'll be glad to take a look and provide as much information as possible.

Thanks!