I decided not to proceed with the work around until the weekend to mitigate the risk of interruption to multiple live services which are in constant use.
However, during last night's upcp the system did actually attempt the auto-update, hooray! It seems like cPanel need to look at the date conditions in upcp as they obviously don't match the logs or auto gen emails sent.
*BUT* the logs returned:
[2021-11-26 03:30:27 +0000] - Processing command `/usr/local/cpanel/bin/checkallsslcerts --allow-retry --verbose`
[2021-11-26 03:30:28 +0000] [/usr/local/cpanel/bin/checkallsslcerts] The system will check for the certificate for the “cpanel” service.
[2021-11-26 03:30:28 +0000] [/usr/local/cpanel/bin/checkallsslcerts] The system will attempt to verify that the certificate for the “cpanel” service is still valid using OCSP (Online Certificate Status Protocol).
[2021-11-26 03:30:28 +0000] [/usr/local/cpanel/bin/checkallsslcerts] The system will attempt to replace the certificate for the “cpanel” service with a signed certificate from the cPanel Store because the current certificate expires in less than 2 days.
[2021-11-26 03:30:33 +0000] [/usr/local/cpanel/bin/checkallsslcerts] The system will attempt to install a certificate for the “cpanel” service from the system ssl storage.
.
.
.
.
[2021-11-26 03:30:33 +0000] [/usr/local/cpanel/bin/checkallsslcerts] Succeeded domains: 8
[2021-11-26 03:30:33 +0000] [/usr/local/cpanel/bin/checkallsslcerts] Failed domains: 0
[2021-11-26 03:30:33 +0000] [/usr/local/cpanel/bin/checkallsslcerts] Requesting certificate from cPStore …
[2021-11-26 03:30:33 +0000] [/usr/local/cpanel/bin/checkallsslcerts] The cPanel Store returned an error (X::TemporarilyUnavailable) in response to the request “POST ssl/certificate/whm-license/90-day”: We were unable to process your request. Please try again later.
Please can someone confirm whether the cPanel Store is down?
If so then the workaround in my earlier post will not work - it uses /usr/local/cpanel/bin/checkallsslcerts...
EDIT 1: Or maybe this is related to the license issue I mentioned in my first post. This should not be the case as WHM is now working. I've also checked 'Server Configuration -> WHM Marketplace' and the license status is 'Active' AND the server's primary IP works in
cPanel & WHM License Verification | cPanel, L.L.C..
EDIT 2: Progress, well maybe... I updated the cron to run upcp now and not at 3:30 in the am. See log:
[2021-11-27 00:24:56 +0000] [/usr/local/cpanel/bin/checkallsslcerts] The system will attempt to replace the certificate for the “exim” service with a signed certificate from the cPanel Store because the current certificate expires in less than 2 days.
[2021-11-27 00:24:56 +0000] [/usr/local/cpanel/bin/checkallsslcerts] The system will attempt to install a certificate for the “exim” service from the system ssl storage.
[2021-11-27 00:24:56 +0000] [/usr/local/cpanel/bin/checkallsslcerts] None of the certificates in the system ssl storage were acceptable to use for the “exim” service.
[2021-11-27 00:24:56 +0000] [/usr/local/cpanel/bin/checkallsslcerts] The cPanel Store is processing the hostname certificate request.
[2021-11-27 00:24:56 +0000] [/usr/local/cpanel/bin/checkallsslcerts] The system will check the cPanel Store again in an hour to see if the cPanel Store issued the certificate.
[2021-11-27 00:24:56 +0000] - Finished command `/usr/local/cpanel/bin/checkallsslcerts --allow-retry --verbose` in 79.331 seconds
The log suggest that the cPanel Store has now been successfully contacted (ie it's not down or blocked) and the new cert has been ordered, but it needs to check back with the store "in an hour" to see if it's been issued?
