defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL’s verification (0:10:CERT_HAS_EXPIRED)
Merhabalar,
WHM üzerinden autossl özelliğini kullanarak ücretsiz bir şekilde SSL kurmak istediğinizde aşağıdaki gibi bir hata alabilirsiniz.
defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL’s verification (0:10:CERT_HAS_EXPIRED).
Çıktı aşağıdaki gibi veya benzer şekilde olabilir.
6:47:07 PM Checking “example.com” … 6:47:07 PM ERROR TLS Status: Defective ERROR Certificate expiry: 5/17/18, 12:00 AM UTC (13.74 days ago) ERROR Defect: OPENSSL_VERIFY: The certificate chain failed OpenSSL’s verification (0:10:CERT_HAS_EXPIRED). Redirection #1 (example.com): http://example.com/.well-known/pki-validation/00CAA51FED8AE75FC682E11F15104C22.txt → https://example.com/.well-known/pki-validation/00CAA51FED8AE75FC682E11F15104C22.txt WARN Local DCV error (example.com): “cPanel (powered by Comodo)” forbids DCV HTTP redirections. Redirection #1 (www.example.com): http://www.example.com/.well-known/pki-validation/64BA9F73A3A773EE10167625B24F8322.txt → https://www.example.com/.well-known/pki-validation/64BA9F73A3A773EE10167625B24F8322.txt WARN Local DCV error (www.example.com): “cPanel (powered by Comodo)” forbids DCV HTTP redirections. WARN Local DCV error (mail.example.com): “mail.example.com” does not resolve to any IPv4 addresses on the internet. WARN Local DCV error (webmail.example.com): “webmail.example.com” does not resolve to any IPv4 addresses on the internet. WARN Local DCV error (webmail.example.com): “webmail.example.com” does not resolve to any IPv4 addresses on the internet. 6:47:08 PM WARN Local DCV error (cpanel.example.com): “cpanel.example.com” does not resolve to any IPv4 addresses on the internet. WARN Local DCV error (cpanel.example.com): “cpanel.example.com” does not resolve to any IPv4 addresses on the internet. 6:47:12 PM WARN Local DCV error (webdisk.example.com): “webdisk.example.com” does not resolve to any IPv4 addresses on the internet. WARN Local DCV error (webdisk.example.com): “webdisk.example.com” does not resolve to any IPv4 addresses on the internet. ERROR Impediment: TOTAL_DCV_FAILURE: Every domain failed DCV.
İlgili problemin çözümü için ise yapılması gereken işlem aşağıdaki gibidir.
As the previously installed certificate issued by the AutoSSL feature, or was it a third-party SSL certificate? If it was a third-party SSL certificate, the following option is available under the Options tab in WHM >> Manage AutoSSL: Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates.
WHM üzerinden AutoSSL menüsüne geliyoruz ve ilgili seçenekler kısmından “Allow AutoSSL to replace invalid or expiring non-AutoSSL certificates.” aktif edip kaydediyoruz.
