After issuing a Let's Encrypt Certificate for a domain in Plesk the OCSP Stapling is off and enabling this fails with: Failed to enable OCSP stapling on domain: Permission denied

Symptoms

• The toggle option to enable OCSP Stapling is shown right after issuing a Let's Encrypt certificate on a Plesk domain and unavailable after a page refresh:
  
  

• The OCSP Stapling cannot be enabled for the Domain Let's Encrypt certificate via CLI:

  # plesk ext sslit --ocsp-stapling -enable -domain maler-kraemer.ch
  Permission denied
  exit status 1

• While attempting to enable the feature before refreshing the page the following error is shown:

  CONFIG_TEXT: Failed to enable OCSP stapling on domain: Permission denied

Cause

The OSCP Stapling feature was deprecated by Let's Encrypt. Therefore the Disabled status for OCSP Stapling is expected.
 

The behavior where the toggle is shown until the page is refreshed was related to the bug EXTSSLIT-2209:

• Fixed in SSL It! 1.18.2 (4 August 2025) 

Resolution

Update the SSLit! extension