Auto SSL Renewal Error

[ivan.macuser]

I just received some emails from cpanel saying Auto SSL failed:
DNS DCV: The DNS query to “_cpanel-dcv-test-record.suzukiswiftrepository.com” for the DCV challenge returned no “TXT” record that matches the value “_cpanel-dcv-test-record=65nrYg5EHvuqwkLPVtRaSNbvHTAYd3Mm_NarYZqZiT4COUXQyIHaJwA8PrCI3Oyo”.; HTTP DCV: “cPanel (powered by Sectigo)” forbids DCV HTTP redirections.

I’m not sure what this means exactly or how to fix it, things have been working pretty well for the past few months, but I’m still very new to cloudflare and to using SSL. What have I done wrong here?

[sdayman]

It sounds like your cPanel is trying to verify your domain through cPanel DNS, which you’re not using because you’re using Cloudflare. It would be easier to just not use AutoSSL and install a Cloudflare Origin CA cert instead (only works when proxied by Cloudflare).

https://support.cloudflare.com/hc/en-us/articles/115000479507-Managing-Cloudflare-Origin-CA-certificates

[ivan.macuser]

Ok, That is helpful, I’m trying to follow the instructions so I can get this resolved. Not 100 percent sure what I’m doing but so far muddling along.

[ivan.macuser]

Managed to muddle through the instructions, but they were not that clear. I found that the go daddy instructions which really should just be called cpanel instructions worked for me and were super easy to follow as I’m on a host that uses cpanel. Thanks so much for pointing me in the right direction, looks like I did it right and the site is still accessible and reporting secure for now.

Here is the direct link in case anyone else ends up needing this too: Cloudflare origin CA free SSL installation guide on Godaddy - Digital Candy web agency based in Hong Kong