My SSL certificate expired yesterday and there is a GIANT warning on my pages telling visitors that someone may be trying to steal their information. My domain is: https://www.coremagazines.com I ran this command: It produced this output: My web server is (include version): The operating system my web server runs on is (include version): My hosting provider, if applicable, is: GoDaddy I can login to a root shell on my machine (yes or no, or I don’t know): I’m using a control panel to manage my site (no, or provide the name and version of the control panel): cPanel The version of my client is (e.g. output of certbot --version or certbot-auto --version if you’re using Certbot):

I logged into the section to manage the certificate but it only confirms that my certificate has expired. They told me that I have to go to the company that issued the certificate. The email alert that I signed up for, works for GoDaddy-issued certificates. So I didn’t get an alert.

I actually had to initiate the original request to GoDaddy. It seems they are holding on to the renewal instructions for dear life.

Well the current cert is useless. Can you delete it and start over?

It’s worse than useless because it is actually interfering with my readership/clientele. Those visitors may not come back to my site because of the message. What I found out: Sometime during the last 3 months, they’ve (GoDaddy) stopped honouring the Certificate Requests and are now sending people to Certbot for that part of the process. That’s why when you do a search for Let’s Encrypt documentation it brings you to that section – but it doesn’t explain why you’re there. Now I have to read all the Certbot information to figure out what to do and how to do it.

If they said you should use certbot, then I can help you with that. Is certbot already installed? Can you login with SSH?

This is what they actually said in a generic message in “Help”. And this is based on a NEW certificate not a renewal. But I guess I need to do a new one. “Generate your certificate signing request (CSR). Let’s Encrypt recommends generating your certificate through Certbot but this is not supported on GoDaddy’s cPanel Linux hosting . Instead, you will need to use a third party client to generate your Let’s Encrypt certificate. GoDaddy and Let’s Encrypt do not control or review these third party clients and cannot guarantee their safety or reliability. You can find a list of available options under the Browser section.”

[image] Cherryl: this is not supported on GoDaddy’s cPanel Linux hosting For long term ease-of-use, you may want to change that plan (to one that includes it) or change hosting providers. For now... Are you able to install certbot on that system? Otherwise, it will be a very manual process every <90 days...

I wouldn’t mind the manual use if the instructions were clear. For the system, I chose Apache and Other UNIX. Not sure if that’s right.

[image] rg305: Can you login with SSH? If so, please show: lsb_release -a or uname -a

[image] Cherryl: I wouldn’t mind the manual use if the instructions were clear. How did you install the cert last time? I'm not sure you will be able to install cerbot onto that system - it may be "shared" hosting. If NOT, I'm putting together a (makeshift) step-by-step for you to get a signed cert ASAP. Must haves: access to OPENSSL ability to copy file private key and public cert into the system (probably in cPanel) [in a secure location - execute the following] Step#1: openssl req -out rsa.public.csr -new -sha256 -newkey rsa:2048 -nodes -keyout rsa.private.key.pem Or Step#1 split into two separate steps (optional): Step#1A: openssl genrsa -out rsa.private.key.pem 2048 Step#1B: openssl req -new -sha256 -key private.key.pem -out rsa.public.csr Step#2: Send CSR to cert signing authority. [you can use a site like freessl.org - ensure you click "I have a CSR" (page 2)] The "verify type" can be either DNS or FILE (do you recall which you did last time?) [If you have questions or doubts just ask] [image] Step#3: Recieve a signed public certificate. Step#4: Load public cert and private key into cPanel.

Where do I go to start the SSL certificate renewal process on Let's Encrypt?

Help

rg305 November 28, 2019, 3:05am 11

If so, please show:
lsb_release -a
or
uname -a

Topic		Replies	Views
Need assistance with SSL certificate renewal Help	8	905	September 12, 2020
How to renew SSL cert. Cert will expire on 3th Feb 2018 Help	7	5759	December 15, 2017
How to renew SSL certificate Help	7	1097	May 23, 2021
Renew certificate without Cerbot Help	4	6207	November 5, 2018
Expired SSL-Can it be easily renewed? Help	3	617	July 2, 2020

Where do I go to start the SSL certificate renewal process on Let's Encrypt?

Related topics