Renewal for SSL Certificate Fails

[user326060]

Using FQDN provided by 3CX...
Been getting this message on a few of our hosted 3CX servers

HTTPS Certificate renewal Failed - Network problem
SSL certificate failed due to network conditions. Unable to reach Certificate Issuing Servers. The process to renew your certificate will start again in a couple of hours

Is there a way to monitor when the 3CX provide cert expires/renews?

 

[Alphabetic]

Viewing the cert from the MGMT console webbrowser will tell you when the cert expires.

What're your DNS settings set to?

 

[user326060]

Isn't the expiring date on the MGMT console for the 3CX license/maintenance?

DNS is OpenDNS servers

 

[Alphabetic]

The SSL certificate is from LetsEncrypt which I believe renews every 3-4 months if im not mistaken. Your maintenance date does not neccessarily reflect the certificate expiration date. It just means if your maintenance becomes expire your cert will either get revoked or not be renewed. Could you try changing your DNS to Google 8.8.8.8 and trying again? I had an issue with using Cloudflares DNS before.

 

[cobaltit]

Isn't the expiring date on the MGMT console for the 3CX license/maintenance?

DNS is OpenDNS servers

It's regular old SSL. So you can view the cert just like you can on any other website that uses SSL:

https://www.thesslstore.com/knowled...-check-a-certificates-expiration-date-chrome/

 

[user326060]

Guess my specific question is how do we get the issue resolved before it becomes an issue since it's provided by 3CX?

 

[cobaltit]

You are assuming it's an issue that you can resolve. Transient errors are not uncommon when you have hundreds of thousands of devices trying to do the exact thing you are doing. Could be a temporary DNS issue, a network routing issue from your provider, etc. You don't mention if there's any common denominators with the instances having issues. I've seen 3CX certificate renewals fail sometimes 3 days in a row and then work. Luckily it starts renewing 30 days out so you should be fine.