• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Issue Let's Encrypt extension can not issue or renew certs: error 400

ServerObserver

New Pleskian
Whenever I attempt to issue or renew a Let's Encrypt SSL certificate on any domain connected to the server, I get the following error.

------------------------------------------------------------------------------------------------------
Code:
Could not issue an SSL/TLS certificate for fairinternet.org

Details

Could not issue a Let's Encrypt SSL/TLS certificate for fairinternet.org. Authorization for the domain failed.

Details

Invalid response from https://acme-v02.api.letsencrypt.org/acme/authz-v3/2900557541.



Details:



Type: urn:ietf:params:acme:error:connection



Status: 400



Detail: Fetching [redacted] Timeout during connect (likely firewall problem)
-------------------------------------------------------------------------------------------------------------

As the error suggests a firewall issue, I disabled ModSec as a first stage isolation test, however the error continues unabated. The websites all resolve without issue, and the acme-challenge resolves if the URL is placed in browser. From the authz log, the HTTP-01 challenge appears to be timing out and I'm not entirely sure why as I have disabled all firewalls (they're re-enabled now) as part of troubleshoot staging to work backwards from there and still it does not work.

When I follow the steps in this help centre article: [BUG] Let's Encrypt auto renew is not working for domains or Plesk with renamed certificates

I am able to issue a cert to the plesk server, however when I attempt to secure any single domain manually through the extension I get the same 400 error stated above.

I have gone through the steps in this help centre article as well: Troubleshooting failed Let's Encrypt certificate installations for a domain in Plesk

DNS appears to be set up correctly, with both IPv4 and IPv6 resolving on both sides. The websites for all domains are accessible and compatibility mode does not appear to be enabled.

I'm honestly at a loss. Can anyone help?
 
I think that if any recommendations from related KB articles do not help, then you should contact Plesk Support Team for help.
 
Back
Top