Articles in this section

See more

Unable to issue Let's Encrypt certificate when Let's Encrypt extension is in standalone mode

Avatar
Renan Moreira
Updated
Follow
kb: bug ext: le ABT: Group B Plesk Obsidian for Windows

Applicable to:

  • Plesk Obsidian for Windows

Symptoms

  • Unable to issue a Let's Encrypt certificate in Domains > example.com > SSL/TLS Certificates > Install > Get it free:

    CONFIG_TEXT: Domain validation failed
    Type: urn:ietf:params:acme:error:unauthorized
    Status: 403
    Detail: Invalid response from http://example.com/.well-known/acme-challenge/uksG0XWFd8Yd6K51U09HosKjhS7jWF_xEMP5ru_OJ0Y
    "<!DOCTYPE html PUBLIC \"-//W3C//DTD XHTML 1.0 Strict//EN\" \"http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd\"> \n<html xmlns=\"http"

  • A test.txt file created in %plesk_dir%var/acme-challenge folder is accessible via at http://example.com/.well-known/acme-challenge/test.txt in a web browser.

  • SSL It! extension is disabled or absent in Extensions > My Extensions.

Cause

SSL It! extension was installed and enabled previously.

The common challenge directory is automatically activated when SSL It! extension is installed. After disabling or uninstalling SSL It!, a common challenge directory is still enabled, but Let's Encrypt is unable to use it in standalone mode.

This is SSL It! extension bug with the ID #EXTSSLIT-867, that will be fixed in the next extension updates.

Resolution

Until the bug will be fixed, apply one of the solutions below:

Enable SSL It! extension

  1. Log into Plesk.

  2. Go to Extensions > My Extensions > SSL It!.

  3. Press More and then Enabled button:
    ssl3.png

Disable Common Challenge Directory if SSL It! is disabled

  1. Log into the server via RDP.

  2. Start a command prompt as an Administrator.

  3. Execute the command below to enable SSL It! extension:

    C:\> plesk bin extension --enable sslit

  4. Disable Common Challenge Directory:

    C:\> plesk ext sslit --common-challenge-dir -disable

  5. Disable SSl It! extension:

    C:\> plesk bin extension --disable sslit

Disable Common Challenge Directory if SSL It! is uninstalled

  1. Log into the server via RDP.

  2. Start a command prompt as an Administrator.

  3. Execute the command below to disable Common Challenge Directory:

    C:\> plesk sbin websrvmng --remove-global-rewrite-rule --name=acme-challenge

Comments

2 comments

Sort by Date Votes
  • Avatar
    Peter Milford

    every update to Plesk I have to go rerun this to fix this error.  Just had to run it again after updating to 18.0.38 this last week. SSLIT is disabled.

    0
    Comment actions Permalink
  • Avatar
    Yulia Plokhotnikova

    Hello @Peter Milford,

    Could you try to enable SSLIt extension instead or remove it and then disable the Common Challenge Directory ( 1st or 3rd solution)?

    0
    Comment actions Permalink

Please sign in to leave a comment.

Have more questions? Submit a request

Related articles