SOLVED ⚠ 1 service generated warnings while checking SSL certificates.

[icp77]

Good morning, at the moment I have a problem with the renewal of the ssl certificate of the hostname of a server, the message is the following:

The following cPanel service generated warnings from the checkallsslcerts script. cpanel​ El sistema no pudo adquirir un certificado firmado de cPanel Store debido al siguiente error: El sistema no pudo adquirir un certificado firmado de cPanel Store. ({"domain_details":null,"status":"revoked","status_details":null,"status_message":"Stale CSR"}) .

Este aviso es el resultado de una solicitud de “/usr/local/cpanel/bin/checkallsslcerts”.

We have tried reinstalling the certificate, but the message is the same with cpanelstore.

thanks for your help

 

[kodeslogic]

Can you run this command with root user and see what error you get?

#  /usr/local/cpanel/bin/checkallsslcerts  --verbose

 

[icp77]

Hello,

thanks for your answer, this is the message that always appears with the mentioned command:

[root@abc123 ~]# /usr/local/cpanel/bin/checkallsslcerts --verbose
The system will check for the certificate for the “cpanel” service.
El sistema intentará sustituir los certificados autofirmados del servicio “cpanel” con un certificado firmado de cPanel Store.
The system will attempt to install a certificate for the “cpanel” service from the system ssl storage.
None of the certificates in the system ssl storage were acceptable to use for the “cpanel” service.
The system will attempt to install a certificate for the “cpanel” service from the cPanel store.
[WARN] El sistema no pudo adquirir un certificado firmado de cPanel Store debido al siguiente error: El sistema no pudo adquirir un certificado firmado de cPanel Store. ({"domain_details":null,"status":"revoked","status_details":null,"status_message":"Stale CSR"}).
The system will check for the certificate for the “dovecot” service.
El sistema intentará sustituir los certificados autofirmados del servicio “dovecot” con un certificado firmado de cPanel Store.
The system will attempt to install a certificate for the “dovecot” service from the system ssl storage.
None of the certificates in the system ssl storage were acceptable to use for the “dovecot” service.
The system will check for the certificate for the “exim” service.
El sistema intentará sustituir los certificados autofirmados del servicio “exim” con un certificado firmado de cPanel Store.
The system will attempt to install a certificate for the “exim” service from the system ssl storage.
None of the certificates in the system ssl storage were acceptable to use for the “exim” service.
The system will check for the certificate for the “ftp” service.
El sistema intentará sustituir los certificados autofirmados del servicio “ftp” con un certificado firmado de cPanel Store.
The system will attempt to install a certificate for the “ftp” service from the system ssl storage.
None of the certificates in the system ssl storage were acceptable to use for the “ftp” service.
[root@abc123 ~]#

Today in the morning have a different new message:

cpanel​ El sistema no pudo adquirir un certificado firmado de cPanel Store debido al siguiente error: (XID 9nbtx6) La respuesta a la solicitud de HTTP (Protocolo de Transferencia de Hipertexto) “GET” de “ indicó un error (504, Gateway Timeout): 504 Gateway Tim… The response to the HTTP “GET” request from “ indicated an error (504, Gateway Timeout): 504 Gateway Tim….

Este aviso es el resultado de una solicitud de “/usr/local/cpanel/bin/checkallsslcerts”. El sistema generó este aviso el lunes, 5 de diciembre de 2022 a las 9:36:41 (UTC).

Thanks again

 

[kodeslogic]

I would suggest you open a support ticket to the cPanel team or contact certified System Administrators to assist you further.

 

[cPanelWilliam]

Hi! Can you try the workaround from the following article, then re-run the checkallsslcerts script to see whether it allows the hostname SSL to be renewed?

Stale hostname CSRs causes the cPanel store to fail creating an SSL order

 

[icp77]

Hello,

thanks again for your help (kodeslogic - cPanelWilliam)

We executed the command indicated in the workaround, the data was updated and we proceeded with the following:

# /usr/local/cpanel/bin/checkallsslcerts

The Certificate updated successfully.

 

[kodeslogic]

Glad you have it resolved.

 

[bilalbinsaeed]

Hi! Can you try the workaround from the following article, then re-run the checkallsslcerts script to see whether it allows the hostname SSL to be renewed?

Stale hostname CSRs causes the cPanel store to fail creating an SSL order

Hi, the link is broken. Can you share a new one?
I'm facing the same error on my fresh install.

 

[cPRex]

@bilalbinsaeed - here's the command that was on that page:

mv /var/cpanel/hostname_cert_csrs{,.cpbkp} -v

After that, run this to force a new AutoSSL run:

/usr/local/cpanel/bin/checkallsslcerts