WebHost Manager URL showing insecure?

[Sachin James]

Why my WHM panel URL showing "connection not secure" error? :snag.gy/Jo4zXn.jpg

version: 68.2.37

One of my other panel working without any error

Please advise ASAP

 

[cPanelLauren]

Hello @Sachin James

I am unable to view the screenshot you included - can you please add it as an attachment to the post?

I can say that this behavior occurs when you do not have an SSL installed for the hostname. If you WHM>>Service Configuration>>Manage Service SSL certificates can you see an SSL certificate installed?


Thank you,

 

[Sachin James]

Hello,

Thank you for your reply...

I have attached the screenshot. I have followed the above steps. Please refer the attached file

 

[Sachin James]

I think this will help


]# /usr/local/cpanel/bin/checkallsslcerts --verbose
The system will check for the certificate for the “cpanel” service.
The system will attempt to replace the self-signed certificate for the “cpanel” service with a signed certificate from the cPanel Store.
The system will attempt to install a certificate for the “cpanel” service from the system ssl storage.
None of the certificates in the system ssl storage were acceptable to use for the “cpanel” service.
The system will attempt to install a certificate for the “cpanel” service from the cPanel store.
[WARN] The system failed to acquire a signed certificate from the cPanel Store because of the following error: (XID 88adsr) “xxxxxxxxxxxxx.manage.example.com” does not resolve to any IPv4 addresses on the internet.
The system will check for the certificate for the “dovecot” service.
The system will attempt to replace the self-signed certificate for the “dovecot” service with a signed certificate from the cPanel Store.
The system will attempt to install a certificate for the “dovecot” service from the system ssl storage.
None of the certificates in the system ssl storage were acceptable to use for the “dovecot” service.
The system will check for the certificate for the “exim” service.
The system will attempt to replace the self-signed certificate for the “exim” service with a signed certificate from the cPanel Store.
The system will attempt to install a certificate for the “exim” service from the system ssl storage.
None of the certificates in the system ssl storage were acceptable to use for the “exim” service.
The system will check for the certificate for the “ftp” service.
The system will attempt to replace the self-signed certificate for the “ftp” service with a signed certificate from the cPanel Store.
The system will attempt to install a certificate for the “ftp” service from the system ssl storage.
None of the certificates in the system ssl storage were acceptable to use for the “ftp” service.

 

[keat63]

This happened to me last week.

This is how I got around it.

In Service Configuration go to 'manage Service SSl certificates' and reset certificates on all services.
I believe at this point, the server installed a self signed certificate, the problem went away, but of course self signed certificates are not ideal.

Next, scroll down to Install a New Certificate.
Choose the services and browse for your certificate.

 

[cPanelLauren]

Hello,


In this case the Hostname SSL process is not seeing that the hostname resolves to an IP address:

[WARN] The system failed to acquire a signed certificate from the cPanel Store because of the following error: (XID 88adsr) “xxxxxxxxxxxxx.manage.example.com” does not resolve to any IPv4 addresses on the internet.

First you should confirm it resolves which can be done with a command such as:

dig a +short xxxxxxxxxxxxx.manage.example.com

You should then confirm that the IP address it resolves to is an IP address on your server.

If both of these are true you may then want to look into the possibility of a network issue, are you NAT routed? If so you may want to ensure that cPanel is aware of the configuration first check for the presence of the cpnat file:

cat /var/cpanel/cpnat

If it doesn't exist and you're sure you're NAT routed, create the file by running:

/scripts/build_cpnat

Then