• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • We are looking for U.S.-based freelancer or agency working with SEO or WordPress for a quick 30-min interviews to gather feedback on XOVI, a successful German SEO tool we’re looking to launch in the U.S.
    If you qualify and participate, you’ll receive a $30 Amazon gift card as a thank-you. Please apply here. Thanks for helping shape a better SEO product for agencies!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Resolved Renew Let's Encrypt Certificate for Hostname

Fatih G.

New Pleskian
Hello,
I am not able to renew the Let's Encrypt SSL certificate for the Plesk Server itself (hotsname). I've installed the certificate over Security Advisor -> System -> Plesk. Now there is only this info: "Plesk is secured with a valid SSL/TLS certificate".

The hostname I use is server.webdevels.de, this subdomain doesn't exist under domains. I also tried to add it manually and add a Let's Encrypt certificate for it but this is not working for Plesk and port 8443.

How can I renew the certificate or delete it so I can add it again over Security Advisor?
 
Here I can only add a selfsigned certificate. Can't renew the cert from lets encrypt.
Meanwhile under "Security Advisor" -> "System" it says again that Plesk is not secured with a SSL certificate, and I am able to click on "Plesk is not secured with a valid SSL/TLS certificate". But if I try it I'll get this error:
Code:
Fehler: Execution letsencrypt-hostname.sh has failed with exit code 1, stdout: , stderr: [2017-04-02 17:25:30] ERR [extension/letsencrypt] Execution of /opt/psa/admin/plib/modules/letsencrypt/scripts/cli.php failed with exit code 1 and the output:
Challenge marked as invalid. Details: Invalid response from http://server.webdevels.de/.well-known/acme-challenge/Ff7nt9oVNvyOUIJBNAYSjPyRXxog1NP4yiucl01lUIg: "<!DOCTYPE html>
<html class="" lang="de-DE" prefix="og: http://ogp.me/ns# fb: http://ogp.me/ns/fb#">
<head>
<meta http-equiv="X"
Execution of /opt/psa/admin/plib/modules/letsencrypt/scripts/cli.php failed with exit code 1 and the output:
Challenge marked as invalid. Details: Invalid response from http://server.webdevels.de/.well-known/acme-challenge/Ff7nt9oVNvyOUIJBNAYSjPyRXxog1NP4yiucl01lUIg: "<!DOCTYPE html>
<html class="" lang="de-DE" prefix="og: http://ogp.me/ns# fb: http://ogp.me/ns/fb#">
<head>
<meta http-equiv="X"

exit status 1
 
o_O ok! Thanks for this info - don't know how this happened - the subdomain was never added. While ordering the server I was asked to enter a URL/Hostname over which I can acces Plesk. I choosed server.webdevels.de and it worked out of the box without adding the subdomain in Plesk. I was also able to add the SSL certificate over the Sevurity Advisor.
Now I created the subdomain and tried to add the SSL certificate over Security Advisor again and it worked now. :oops:

As a last question: How can I renew certificates automaticaly in the future?
 
Hi Fatih G.,

all Let's encrypt certificates listed at "HOME > Extensions > Let's Encrypt" should be renewed automatically within the renewal process. ;)
 
OK, was just wondering because I get "Let's Encrypt certificate expiration notice" mails. But if they renew automatically, everything is fine now!

Thank you very much! :cool:
 
Hi Fatih G.,

was just wondering because I get "Let's Encrypt certificate expiration notice" mails.
When I first used Let's Encrypt certificates, I checked the validation of the certificates manually and modified the standard "renewal" scheduled task ( HOME > Tools & Settings > Scheduled Tasks - command: "/opt/psa/admin/bin/php -dauto_prepend_file=sdk.php '/opt/psa/admin/plib/modules/letsencrypt/scripts/renew.php'" ) to run more often than "just once a month" ;)
 
Back
Top