The autossl_check script is a command-line tool that checks SSL certificate status and coverage for your server's users. It helps you troubleshoot AutoSSL issues by verifying whether certificates have expired and ensuring domains have proper SSL coverage.
What is the autossl_check Script?
Located at /usr/local/cpanel/bin/autossl_check, this script allows you to manually verify SSL status for individual users or all users on your server. The system automatically runs this script daily through a cron job stored in the /etc/cron.d directory to maintain SSL coverage across your hosting environment.
When you select the Run AutoSSL for All Users option in WHM's Manage AutoSSL interface (WHM >> Home >> SSL/TLS >> Manage AutoSSL), the system executes this script behind the scenes. At OBHost, this automated process ensures your SSL certificates remain current without manual intervention.
How to Run the autossl_check Script
To execute this script from the command line, use the following format:
/usr/local/cpanel/bin/autossl_check [options]
You must have root or appropriate administrative access to run this script on your server.
Available Command Options
The autossl_check script supports three main options to control its behavior:
Check SSL for a Specific User
Use the --user option to perform an AutoSSL check for a single user account:
/usr/local/cpanel/bin/autossl_check --user=username
Replace username with the actual cPanel username you want to check. This option is useful when troubleshooting SSL issues for a particular account.
Check SSL for All Users
Use the --all option to run an AutoSSL check across all user accounts on your server:
/usr/local/cpanel/bin/autossl_check --all
This comprehensive check examines every user's SSL status and identifies any certificates that need renewal or installation.
Display Help Information
Use the --help option to view the script's available commands and usage instructions:
/usr/local/cpanel/bin/autossl_check --help
Common Use Cases
The autossl_check script proves valuable in several situations:
- Troubleshooting SSL Issues: When a user reports SSL certificate problems, run the script with their username to identify specific issues
- Post-Migration Verification: After migrating accounts to OBHost, verify all SSL certificates transferred correctly
- Manual Certificate Renewal: Force certificate checks before the scheduled cron job runs
- Server Maintenance: Audit SSL coverage across your entire server to ensure no domains lack protection
Understanding Script Output
When you run autossl_check, the script provides detailed information about certificate status, including:
- Current certificate expiration dates
- Domains covered by existing certificates
- Domains missing SSL coverage
- Any errors preventing certificate installation
- Renewal attempts and their outcomes
Review this output carefully to identify and resolve any SSL-related issues on your server.
Frequently Asked Questions
How often does the autossl_check script run automatically?
The system executes the autossl_check script once daily through an automated cron job. This ensures regular monitoring of SSL certificate status without requiring manual intervention. You can also run the script manually anytime you need immediate verification.
What should I do if autossl_check shows certificate errors?
When the script reports errors, first review the specific error messages in the output. Common issues include DNS validation failures, domain pointing to incorrect servers, or firewall blocking validation attempts. Correct the underlying issue, then run the script again with the --user option to verify the fix.
Can I run autossl_check for suspended users?
Yes, the script checks SSL status for suspended accounts when using the --all option. However, AutoSSL typically does not attempt certificate renewal for suspended users. Unsuspend the account first if you need active certificate management.
Does running autossl_check manually affect the automatic schedule?
No, manually executing the autossl_check script does not interfere with the daily automated cron job. Both can run independently without conflicts. Manual runs simply provide immediate verification outside the regular schedule.
If you need assistance with SSL certificate management or the autossl_check script, OBHost's support team is available 24/7. Contact us at https://www.obhost.net/contact or email support@obhost.org for help with your server configuration.
