Solved SSL Certificate renewal failed - every day

[jpercival]

We have been getting this error for close to 3 weeks now every morning at roughly 4:30am:

"HTTPS Certificate renewal Failed - Network problem SSL certificate failed due to network conditions. Unable to reach Certificate Issuing Servers. The process to renew your certificate will start again in a couple of hours."

I have searched numerous posts here about this issue and have not found anything to resolve my issue. Our server OS is supported and I can't find anything in our firewall or content filtering that indicates that any traffic to or from anything related to "letsencrypt" is being blocked.

I see in my Inbox that we haven't received a message pertaining to a successful SSL cert renewal since 8/21/2020 which states that it valid for 90 days. If accurate, that expiration is coming up in less than 2 weeks.

For what it's worth, 3CX was upgraded to 16.0.6.655 a couple weeks ago (5 days after the cert issue started) for an unrelated reason.

While the screenshot of the event log below only shows the last 4 days, this has been happening for 3 straight weeks.

Any help is GREATLY appreciated.

• 3CX Version, Enterprise Annual 16.0.6.655
• Server OS, Windows Server 2019 v1809
• VM Hosted locally
• Has the Firewall Checker passed: YES
• Are custom Phone Templates being used: NO

 

[Saqqara]

Change your dns servers on the 3CX server to google 8.8.8.8 and 8.8.4.4

On the firewall are you restricting 3CX server internet access ? i.e. only allowing access to certain websites

 

[jpercival]

Change your dns servers on the 3CX server to google 8.8.8.8 and 8.8.4.4

On the firewall are you restricting 3CX server internet access ? i.e. only allowing access to certain websites

Thank you. Changing any IP/DNS settings on the server is not viable during the day since the phones are all working properly. Internet access is not filtered on this server.

 

[cobaltit]

Changing DNS really shouldn't affect anything running unless the new DNS isn't functional but change it after hours then.

 

[jpercival]

DNS has been changed for that segment of our network to 8.8.8.8. Is there a way to force an SSL cert refresh/update or do we simply need to wait until 4:30 am?

 

[jpercival]

Thank you! Cert updated correctly overnight. Our DNS server had been using Quad9s for its DNS which apparently was the issue.

Again, thank you for your help!