AutoSSL wildcard and 'lacks domains' notifications

Operating System & Version
CENTOS 7.9
cPanel & WHM Version
v92.0.9

alexbrett

Member
Jan 22, 2021
5
3
3
Cambridge, UK
cPanel Access Level
Root Administrator
I've been having an issue whereby every time an AutoSSL (Lets Encrypt) certificate gets renewed, my customers are getting notifications like:
1611310155481.png

However, these subdomains are covered, as the certificate has a wildcard in it, for example:
1611310216853.png

I note in the contact manager, it states:
This setting also requires you to enable the Notify when AutoSSL has renewed a certificate and the new certificate lacks at least one domain that the previous certificate secured. setting in WHM’s Manage AutoSSL interface (WHM >> Home >> SSL/TLS >> Manage AutoSSL).

So I thought I could turn that off, however, I don't have that option under the Manage AutoSSL interface, I only have the following:
1611310017051.png

Is there something I need to do to get the option described so I can disable these notifications, as I keep getting queries from my users concerned that their SSL is broken when it isn't?
 
Last edited by a moderator:

alexbrett

Member
Jan 22, 2021
5
3
3
Cambridge, UK
cPanel Access Level
Root Administrator
I'm running cPanel v92.0.9 (latest RELEASE version) - the exact options I see in contact manager are:
1611405165106.png
Obviously I can disable the notifications here, but as I understand it that'd only disable them for me, I'd have to manually do that for every single user's notifications, so ideally I want the option described in "Manage AutoSSL" to disable it there entirely?
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
17,470
2,843
363
cPanel Access Level
Root Administrator
Thanks for that screenshot - that's exactly what I needed to see.

If you want to disable AutoSSL notifications at the user level you'd want to use the WHM >> Manage AutoSSL page under the "Options" tab. That will keep end users from receiving notifications about the AutoSSL Renewal process.
 

alexbrett

Member
Jan 22, 2021
5
3
3
Cambridge, UK
cPanel Access Level
Root Administrator
The problem is as per my first set of screenshots in the options tab I can only choose between users getting notifications for all events, failures/warnings/deferrals, failures, and all disabled - I want the option to explicitly disable the "new certificate lacks one or more of the website's domains" notifications, but leave the rest (so I can leave the users set to get other failures/warnings/deferrals), i.e. the option described in the contact manager, but that doesn't seem to be present in the "Manage AutoSSL" Options tab?
 

cPRex

Jurassic Moderator
Staff member
Oct 19, 2014
17,470
2,843
363
cPanel Access Level
Root Administrator
There isn't quite that level of control over the user-level notifications. If you'd like to see that specifically added to the list, it would be best to use the link in my signature to open a feature request to ask to have that added to the product.