Articles in this section

See more

Unable to access SSL/TLS Certificates domain's option in Plesk: Could not get Mozilla TLS config

Avatar
Alexander Davydov
Updated
Follow
Plesk for Linux kb: technical

Applicable to:

  • Plesk for Linux

Symptoms

Unable to access SSL/TLS Certificates domain's option in Plesk with the following error:

PLESK_ERROR: Could not get Mozilla TLS config: cURL error 6 could not resolve host: statics.tls.security.mozilla.org; Unknown error (see https://curl.haxx.se/libcurl/c/libcurl-errors.html).

If ignoring the error message and try issuing a certificate, the following error is provided:

PLESK_ERROR: Detail: Order's status ("pending") is not acceptable for finalization

Cause

Name resolution issue.
Namely statics.tls.security.mozilla.org could not be resolved from Plesk server.

Resolution

  1. Connect to the server via SSH.

  2. Add Google nameserver to /etc/resolv.conf file:

    # echo "nameserver 8.8.8.8" >> /etc/resolv.conf

  3. If the issue persists re-enable local firewall rules and restart Plesk services:

    # systemctl restart sw-engine && systemctl restart sw-cp-server

Note: If the server is running with systemd-resolved adjust the networking configuration manually or contact the hosting provider for assistance.

Comments

3 comments

Sort by Date Votes
  • Avatar
    Unknown User

    incomplete information

    0
    Comment actions Permalink
  • Avatar
    Francisco Parejo

    In my Centos 7.9 it works perfectly!

    Thank you so much!!!

    0
    Comment actions Permalink
  • Avatar
    Lenusch User

    Hi, 

    just want to mention that just restarting helped. But i will not change my own resolver Server in resolv.conf as i need that, to ping the Mail Blacklists without any open Nameservers. In Conclusion it would be good to have other Solutions (often) instead just set Google or Cloudflare Servers. 

    0
    Comment actions Permalink

Please sign in to leave a comment.

Have more questions? Submit a request

Related articles