Plesk Panel certificate is changed to Let's Encrypt certificate

Created:

2017-07-13 13:28:25 UTC

Modified:

2017-08-18 15:09:12 UTC

0

Was this article helpful?


Have more questions?

Submit a request

Plesk Panel certificate is changed to Let's Encrypt certificate

Applicable to:

  • Plesk for Windows
  • Plesk for Linux

Note: This article has the reference to the issue with the fix available:

  • #EXTLETSENC-222 "In certain cases, when installing or upgrading the extension, a valid certificate used for securing Plesk Panel was detected as insecure and replaced with Let’s Encrypt certificate. Now the extension automatically replaces only self-signed certificates."
    Fixed in:
Please consider updating your server:

Symptoms

Plesk Control Panel certificate was changed from a valid SSL certificate to Let's Encrypt certificate during Daily Maintenance task.

Cause

This is Plesk bug with ID EXTLETSENC-222 that is planned to be fixed in future Let's Encrypt updates.

Resolution

Workaround for Linux :
Add export PLESK_EXT_LETSENCRYPT_SKIP_SECURE_PANEL=true to the /etc/cron.weekly/50plesk-weekly file before the line /usr/local/psa/bin/sw-engine-pleskrun /usr/local/psa/admin/plib/DailyMaintainance/script.php weekly >/dev/null 2>&1

Workaround for Windows :

  1. Open Tools & Settings > System and Security > System > click on "Advanced system settings" at the left side bar.
  2. Select "Advanced" tab then click "Environment variables..." button
  3. Click "New" button in the "System variables" group
  4. Type PLESK_EXT_LETSENCRYPT_SKIP_SECURE_PANEL in the "Variable name" field and true in the "Variable value" field
  5. Click "OK" button

Note: the provided workaround disables Let's Encrypt "auto-secure" feature completely.

Have more questions? Submit a request
Please sign in to leave a comment.