Calendar and Contact Server using old SSL certfiicate

[tmurdock]

I am having an issue that just started this morning with the CCS service. I am using a 3rd party Outlook plugin that syncs the Outlook calendar to the calendar of a user on my cPanel server. This has worked for several years with minimal problems.

However this morning I am being greeted with errors from the Outlook plugin stating the "remote certificate is invalid according to the validation procedure". Ok, I'll start checking out the SSL certificates. I did just renew a certificate with LetsEncrypt last week (I do not use the AutoSSL feature), and everything had been working fine. I never used to create certificates for the subdomains of my domain, just mail.companyname.com and companyname.com. This has always worked before.

Banging my head against a rock, I renewed the certificate but included all the cpanel subdomains as well, and re-installed the certificate. Visiting my webpage or any of the other subdomains will show the new certificate that I just created this morning, but if I navigate to companyname.com:2080, I get an error from my browser that says the site is not secure, and viewing the certificate shows the old certificate that expired yesterday.

I've gone into SSL/TLS settings in cPanel and removed any old expired SSL certificates that may have been in there, but I am still getting that error. Also, if I navigate to cpcalendars.companyname.com, the URL auto directs to https://host.companyname.com:2080 and serves the SSL certificate for the hostname of the server (which is valid).

I haven't made any changes to anything except updating the SSL certificate last week, which I have done every 90 days for the past five years without issue. I am at a loss... Anyone have any ideas?

 

[cPRex]

Hey there! As a test, can you check /opt/cpanel-ccs/conf/domain-TLS/your-domain-name.pem and see if that file exists?

If the file isn't there, there could be an issue with CCS.

If the file is there, it should be working properly.

Either way, we'll likely need a support ticket on this issue as this isn't a common problem and should be working automatically. Could you submit a ticket to us and then post the number here?

 

[tmurdock]

Hi there! Thanks for the response. So after troubleshooting for a while, it started working again all of a sudden... Looking at the creation date/timestamp of the domain.pem file shows is as being created today at around the same time I noticed it was working again. I did restart the CCS service a couple times but it didn't seem to help at first.

Maybe it cached the old certificate? Either way, it is working again and I will keep an eye out in 90 days when the SSL certificate gets renewed again...

Thanks,
Tom

 

[cPRex]

Sounds good - thanks for letting me know!