ÇáÓí ÈÇäÇá WHM/CPanel Íá ãÔßáÉ The SSL cert will expire in less than 30 days
SSL certificate is not renewed automatically - cPanel SSL Certificate will Expire in 30 Days
How to reset/renew cPanel/WHM Self-signed Certificate?
free cPanel-signed hostname certificate
ÇáÓí ÈÇäÇá WHM/CPANEL Íá ãÔßáÉ ÔåÇÏÉ SSL æ LET'S ENCRYPT A RATE LIMIT PREVENTS DCV
ÇáãÔßáÉ :
ÊÇÊì ÇíãíáÇÊ ÈÇä åäÇß ãÔßáÉ Ýì ÊæáíÏ ÔåÇÏÉ ssl ÊáÞÇÆíÇ æåíÊÈÞì ãÏÉ ááãÍÇæáÉ ÇáÞÇÏãÉ
áÊæáíÏ ÔåÇÏÉ ÌÏíÏÉ ÈÚÏ 15 íæã Çæ ÞÈá ÇáÇäÊåÇÁ È 3 ÇíÇã Çæ Çä ÇäÊåÊ ÇáãÏÉ ÏÏæä ÊæáíÏ ÔåÇÏÉ ÌÏíÏÉ.
You might be receiving an email with subject like “The
SSL certificate for “[service like exim, ftp, dovcot, cpanel]” on “[Vpshostname]” will expire in less than 30 days.” These all are self signed certificates of services cpanel, exim, dovecot, ftp etc which are required to be reset every year.
Çæ
90 day cPanel issued SSL certificates are renewed three days before expiration instead of 25 days
When /usr/local/cpanel/bin/checkallsslcerts runs it thinks cPanel provided hostname certificates are third-party SSL certificates, which causes the SSL to be renewed three days prior to expiration.
-------------------------------------------------------
Íá ÇáãÔßáÉ ÊæáíÏ ÔåÇÏÉ ãä ÇáÓíÑÝÑ Self-signed Certificate
-------------------------------------------------------
åÐå ÔåÇÏÉ self ÍãÇíÉ ÖÚíÝÉ ãÄÞÊ æáíÓÊ ÔåÇÏÉ ÍÞíÞíÉ æåíÎÑÌ áå ÊäÈíå ãä ÇáãÊÕÝÍ
Úáì ÈÚÖ ÎÏãÇÊ whm æÎÇÕÉ ãíÒÉ cpanel login ÇáãæÌæÏ ÚäÏ ÇáÏÎæá ãä ÏÇÎá whmcs
åÊÌÏ ÊäÈíå æåÊÝÊÍ cpanel ÇáÚáÇãÁ æåäÇß ÔåÇÏÉ ÚáíåÇ ÊÚÌÈ ÇäåÇ self
æáßä ÇáåÏÝ ãäåÇ åæ ÍÐÝ ÇáÔåÇÏÉ ÇáÞÏíãÉ æÊæáíÏ ÔåÇÏÉ ÌÏíÏÉ !
- Login to your WHM control panel.
- Go to Home > Service Configuration > Manage Service SSL Certificates.This will display a list of certificates used by various services on your server along with their expiry dates.
- If any of the certificates are expiring within 30 days, click on the Reset Certificate link in the Action column.
- Once a new certificate is generated and installed, the Certificate Expirationcolumn will display the new expiry date.
åíÙåÑ ÊäÈíå Confirm SSL Certificate Reset æÇÝÞ Ëã åÊÌÏ Expiration ÊÌÏÏ áãÏÉ ÓäÉ
Ëã åíØáÈ ÑíÓÊÇÑÊ ... Þã ÈÇáãæÇÝÞå ÝÞØ
Restart cpsrvdIn order to complete your SSL Certificate installation cpsrvd will need to be restarted.Restart cpsrvd now?
æãÈÑæß Êã ÊÌÏíÏ ssl
Ýì ÍÇáÉ ÇáÑÛÈÉ Ýì ÇáÊÑÇÌÚ Úä Self-signed¿
ÇÖÛØ Úáì browse certificates æåÊÌÏ ÇáÔåÇÏÉ ÇáÞÏíãÉ ãæÌæÏÉ
Úáã ÚáÇãÉ ÕÍ ãËá Çáì Ýì ÇáÕæÑÉ Úáì ÇáÌãíÚ Ëã åÊÌÏ ÇáÔåÇÏÉ ÇáÞÏíãÉ ÇÎÊÑåÇ
æÇáÔÑÍ åäÇ Ýì ÍÇáÉ ÇäåÇ expired Çæ Çäß áÇ ÊÑíÏ ÇáÇäÊÙÇÑ !! ÎØæÉ reset åÇãÉ áÊæáíÏ ÔåÇÏÉ ÌÏíÏÉ !!
ÊæáíÏ ÔåÇÏÉ ÍÞíÞíÉ free cPanel-signed hostname certificate :
ãä ÇáãÝÊÑÖ ãä ÊáÞÇÁ äÝÓåÇ ÊæáÏ ÔåÇÏÉ ÌÏíÏÉ Ýì ÇæÞÇÊ ãÍÏÏÉ æáßä ÞÏ íÕÇÏÝ åÐÇ ÇáæÞÊ
ÊÚØá áåÇ ÈÓÈÈ æÌæÏ ÖÛØ Úáì ãæÞÚ ÊæáíÏ ÇáÔåÇÏÇÊ æåíÊÑÊÈ Úáì Ðáß ÇáÇäÊÙÇÑ ßËíÑ !
this certificate will still update once the certificate has reached 3 days before expiry. This notification is a false-positive, however, if you still would like to replace your certificate immediately, you can complete the following steps: First, reset the hostname certificate to a self-signed one:
ÈÚÏ Úãá reset ááÔåÇÏÇÊ ãä ÏÇÎá whm Çæ ãä ÎáÇá åÐÇ ÇáÇãÑ
ßæÏ:
for service in ftp exim dovecot cpanel ; do whmapi1 --output=jsonpretty reset_service_ssl_certificate service=$service ;done
åÇã ÌÏÇ !
íÌÈ Úãá Reset ááÔåÇÏÉ ÇæáÇ
Ëã ÇÏÎá ÇãÑ Ýì terminal áÊæáíÏ ÔåÇÏÉ ÌÏíÏÉ
Finally, run checkallsslcerts to order a new certificate:
ßæÏ:
/usr/local/cpanel/bin/checkallsslcerts
ÇáäÊíÌÉ :
ÇÐÇ áã íÚãá æÇÚØì ÎØÇ åäÇ åäÇß áæÏ Úáì ãæáÏ ÇáÔåÇÏÇÊ æÌÑÈ ÈÚÏ ÓÇÚÇÊ æåíÚãá 100 %
ÓÈÈ Èáæß ÇáÝÇíÑææá CSF / Hulk Çäß áã ÊÖÚ Çí ÈíåÇÊ ãæáÏ SSL
Ýì csf íÌÈ Çä ÊÖÚ ÇáÇíÈíåÇÊ Ýì ßáÇ allow + Ignore
https://support.cpanel.net/hc/en-us/...originate-from
ÔÇåÏ ÇíÖÇ
ÇáÓí ÈÇäÇá WHM/CPanel Íá ãÔßáÉ ssl/certificate/whm-license/90-day
ÇáÓí ÈÇäÇá WHM/CPANEL Íá ãÔßáÉ ÔåÇÏÉ SSL æ LET'S ENCRYPT A RATE LIMIT PREVENTS DCV
ÇáãÑÌÚ:
https://docs.cpanel.net/whm/scripts/...lcerts-script/
https://support.cpanel.net/hc/en-us/...ore-expiration
https://support.cpanel.net/hc/en-us/...ods-is-invalid
https://docs.cpanel.net/whm/service-...-certificates/
https://manage.accuwebhosting.com/kn...rtificate.html
https://www.web24.com.au/tutorials/c...ire-in-30-days
https://iserversupport.com/blog/ssl-...30-days-fixed/
https://forums.cpanel.net/threads/ss...ically.649833/
https://cwcshd.freshdesk.com/support...-than-30-days-
https://areatype.com/blog/updating-s...ertificate-whm
ÇáãÝÖáÇÊ