Articles in this section

Unable to issue Let's Encrypt certificate when Let's Encrypt extension is in standalone mode

Renan Poss Moreira
Updated
kb: bug ext: le Plesk Obsidian for Windows ABT: Group B

Applicable to:

  • Plesk Obsidian for Windows

Symptoms

  • Unable to issue a Let's Encrypt certificate in Domains > example.com > SSL/TLS Certificates > Install > Get it free:

    CONFIG_TEXT: Domain validation failed
    Type: urn:ietf:params:acme:error:unauthorized
    Status: 403
    Detail: Invalid response from http://example.com/.well-known/acme-challenge/uksG0XWFd8Yd6K51U09HosKjhS7jWF_xEMP5ru_OJ0Y
    "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\"> \n<html xmlns=\"http"

  • A test.txt file created in %plesk_dir%var/acme-challenge folder is accessible via at http://example.com/.well-known/acme-challenge/test.txt in a web browser.

  • SSL It! extension is disabled or absent in Extensions > My Extensions.

Cause

SSL It! extension was installed and enabled previously.

The common challenge directory is automatically activated when SSL It! extension is installed. After disabling or uninstalling SSL It!, a common challenge directory is still enabled, but Let's Encrypt is unable to use it in standalone mode.

This is SSL It! extension bug with the ID #EXTSSLIT-867, that will be fixed in the next extension updates.

Resolution

Until the bug will be fixed, apply one of the solutions below:

Enable SSL It! extension

  1. Log into Plesk.

  2. Go to Extensions > My Extensions > SSL It!.

  3. Press More and then Enabled button:
    ssl3.png

Disable Common Challenge Directory if SSL It! is disabled

  1. Log into the server via RDP.

  2. Start a command prompt as an Administrator.

  3. Execute the command below to enable SSL It! extension:

    C:\> plesk bin extension --enable sslit

  4. Disable Common Challenge Directory:

    C:\> plesk ext sslit --common-challenge-dir -disable

  5. Disable SSl It! extension:

    C:\> plesk bin extension --disable sslit

Disable Common Challenge Directory if SSL It! is uninstalled

  1. Log into the server via RDP.

  2. Start a command prompt as an Administrator.

  3. Execute the command below to disable Common Challenge Directory:

    C:\> plesk sbin websrvmng --remove-global-rewrite-rule --name=acme-challenge

Was this article helpful?

Comments

0 comments

Please sign in to leave a comment.