How to manually renew a Let's Encrypt certificate in Plesk?

Follow

Comments

10 comments

  • Avatar
    Sid B

    This answer is no longer valid. Current versions of Obsidian load the Letsit extension that does NOT have a “renew” button. The extension has a different dialog, with a “reissue” certificate button, which uses the same acme challenge test string as you had originally, and has a second step where you have to do a “reload”.

    it’s not quite as simple as it used to be. There is also some issue with the autorenew cron task - it runs without giving errors, but it doesn’t actually renew your certifications, so be aware you will be doing a lot of renewals. :)

     

    Sid

    2
    Comment actions Permalink
  • Avatar
    Francisco Roman Garcia Rodriguez

    Hi Sid B,

    Effectively, there's a new extension named SSLit which replaces this one, so a new method should be used but it's not quite different as there's a button to Renew certificate on the top-right at the screen:

    Plesk > Domains > example.com > SSL/TLS Certificate for example.com > Reissue Certificate

    Then the screenshot from this article applies as it's needed to enter the email and select some checkboxes to "Get it free".

    If you have issues renewing the cert, please open a support request so we can investigate it.

    -1
    Comment actions Permalink
  • Avatar
    Sid B

    I understand, but my point was that now, with SSLit the interface IS different:  the button does NOT say 'renew' anymore - it says 'reissue', AND adds  a second dialog, where it asks you to do a 'reload' as well. It just does not work as simply as it did before. And it does NOT look like the screen shot anymore, at least not with any version of Plesk above ver 17.0

    The end result is the same, but it is definitely more convoluted and confusing to those used to the former approach this post explains. :)

     

    Sid

    1
    Comment actions Permalink
  • Avatar
    Francisco Roman Garcia Rodriguez

    Hi Sid B,

    Then, that would be matter for another article, as it's a different extension and the workflow is different.

    This article is for using the Let's Encrypt extension, not SSLit! :)

    -1
    Comment actions Permalink
  • Avatar
    Henry C. Lavau

    Of course, if your certificate has expired, before renewing,

    1. unable HTTPS to allow Let's encrypt to access the .well-known/acme-challenge file, and
    2. re-enable HTTPS once done.
    2
    Comment actions Permalink
  • Avatar
    epol

    Thanks Henry.

    This was the real solution as the certificate was expired.
    It should be created as a new entry with this solution. (It was crazy to find it)

    1
    Comment actions Permalink
  • Avatar
    linuxsysadmintuts (Edited )

    Dear Mr Henry C. Lavau ,

    i'm using Plesk version Onyx 17.8.11. I used Let's enscript and i can't see "renew" button and can't renew certificate after 30 days.

    Can you describer detail your solution help me( what command line to unable HTTPS to allow Let's encrypt to access the .well-known/acme-challenge file and how to re-enable HTTPS once?

    1. unable HTTPS to allow Let's encrypt to access the .well-known/acme-challenge file, and
    2. re-enable HTTPS once done.
    1
    Comment actions Permalink
  • Avatar
    Henry C. Lavau

    Here I how I do it on Plesk Obsidian 18.0.x

    On the domain dashboard click

    • SSL/TLS Certificates


    There, disable

    1. Redirect from http to https
    2. HSTS

     

    Then click the "ReIssue Certificate" tab

    • Choose Let's encrypt

    After setting the email address and wildcard and www to your needs

    • Get it free

     

    Once the certificate installed, enable

    1. Redirect from http to https
    2. HSTS

     

    HTH

     

    1
    Comment actions Permalink
  • Avatar
    gg haha

    does not work. it gives an error that something with the DNS needs to be done?!??!

    0
    Comment actions Permalink
  • Avatar
    Marc Vidal

    Hi gg haha!

    I recommend you to contact Plesk Support to investigate this issue further.

    0
    Comment actions Permalink

Please sign in to leave a comment.

Have more questions? Submit a request