When clicking WHM or cPanel from AMP or logging in directly, there's an invalid SSL certificate error, or there's an SSL not secure warning when opening cPanel or WHM from AMP. This typically occurs from a recent hostname change, or on a newly provisioned server.
The Hostname SSL check can be forced using SSH to resolve the error.
A possible error message for checkallsslcerts is
The system failed to acquire a signed certificate from the cPanel Store. ({"domain_details":null,"status":"revoked","status_details":null,"status_message":"Stale CSR"})
Related Articles
Determine Server Hostname for FTP/SFTP Connection
Email Client Not Connecting - No Valid SSL
Renew SSL
IMPORTANT: This solution will require root access. If this needs to be obtained, follow the guide on requesting root access.
- SSH into the server as root
- Confirm the hostname on the server using
hostname
- Dig the hostname to confirm DNS is correct
dig domain.com
REPLACE: domain.com with the server hostname.
TIP: Usehostname -i
to determine the IP of the server. - Remove any old SSL certificates
mv /var/cpanel/hostname_cert_csrs{,.cpbkp} -v
TIP: The certificates can also be reset in Root WHM under Manage Service SSL Certificates, located in Service Configuration. - Force the cPanel Hostname SSL check by running the following command as root
/usr/local/cpanel/bin/checkallsslcerts --allow-retry --verbose
NOTE: On success, the new certificate will typically be available within 15 minutes.
Comments
0 comments
Article is closed for comments.