Articles in this section

See more

Let's Encrypt certificate expiration notice for domain "example.com" (and 388 more)

Avatar
Francisco Garcia
Updated
Follow
Plesk Onyx for Linux kb: bug ext: le ABT: Group B

Applicable to:

  • Plesk Onyx for Linux

Symptoms

  • Customer received Let's Encrypt certificate expiration notice for one or multiple domains:

    CONFIG_TEXT: Subject: Let's Encrypt certificate expiration notice for domain "example.com"
    (and 388 more)

    Hello,

    Your certificate (or certificates) for the names listed below will expire in 19 days (on 14 Jan 19 03:23 +0000). Please make sure to renew your certificate before then, or visitors to your website will encounter errors.

    We recommend renewing certificates automatically when they have a third of their total lifetime left. For Let's Encrypt's current 90-day certificates, that means renewing 30 days before expiration. See
    https://letsencrypt.org/docs/integration-guide/ for details.

  • When running the task /usr/local/psa/admin/plib/modules/letsencrypt/scripts/keep-secured.php at Tools & Settings > Scheduled Tasks, it fails.

  • Multiple Let's Encrypt certificates are issued for different domains in Plesk

  • The following error message can be observed in /var/log/plesk/panel.log:

    CONFIG_TEXT: PHP Fatal error: Allowed memory size of 536870912 bytes exhausted (tried to allocate 8192 bytes) in /usr/local/psa/admin/plib/vendor/plesk/zendframework/library/Zend/Db/Statement/Pdo.php on line 228
    PHP Fatal error: Allowed memory size of 536870912 bytes exhausted (tried to allocate 65536 bytes) in /usr/local/psa/admin/plib/dnsmng.php on line 8

Cause

Product issue:

  • #EXTLETSENC-644 "Automatic renewal of Let’s Encrypt certificates no longer fails when a domain has a large number of secured subdomains (more than 200)."
    Fixed in:

Resolution

Please consider updating your server:

Workaround

If update is not possible for some reason you may try the following

workaround

Until a fix becomes available you may use the following workaround:

  1. Log in to Plesk.

  2. Go to Tools & Settings > Scheduled Tasks and click on the /usr/local/psa/admin/plib/modules/letsencrypt/scripts/keep-secured.php Task.

  3. Change the command section to the following:

    CONFIG_TEXT: /usr/local/psa/admin/bin/php -dmemory_limit=-1 -dauto_prepend_file=sdk.php '/usr/local/psa/admin/plib/modules/letsencrypt/scripts/keep-secured.php'

    Note: This can cause highly increased memory usage, thus it is recommended to check the available memory first.

Comments

2 comments

Sort by Date Votes
  • Avatar
    Bob B

    Hello,

    Every day, at 6:00 am, I get this error in panel.log, on Plesk Onyx Version 17.8.11 Update #53 (CentOS 7.6).  Could this be the same issue?  I also received an e-mail that a Let's Encrypt certificate was going to expire soon.

    [2019-05-23 06:00:03.732] ERR [1] PHP Warning: Error while sending QUERY packet. PID=3781; File: /usr/local/psa/admin/plib/vendor/plesk/zendframework/library/Zend/Db/Statement/Pdo.php, Line: 228

    [2019-05-24 06:00:03.389] ERR [1] PHP Warning: Error while sending QUERY packet. PID=11209; File: /usr/local/psa/admin/plib/vendor/plesk/zendframework/library/Zend/Db/Statement/Pdo.php, Line: 228

    Best Regards,

    Bob

    0
    Comment actions Permalink
  • Avatar
    Anton Maslov

    Hello Bob,

    Your issue seems to be a bit different, I left a comment for you under another article.

    0
    Comment actions Permalink

Please sign in to leave a comment.

Have more questions? Submit a request

Related articles