Applicable to:
- Plesk Onyx for Linux
Symptoms
-
Customer received Let's Encrypt certificate expiration notice for one or multiple domains:
CONFIG_TEXT: Subject: Let's Encrypt certificate expiration notice for domain "example.com"
(and 388 more)
Hello,
Your certificate (or certificates) for the names listed below will expire in 19 days (on 14 Jan 19 03:23 +0000). Please make sure to renew your certificate before then, or visitors to your website will encounter errors.
We recommend renewing certificates automatically when they have a third of their total lifetime left. For Let's Encrypt's current 90-day certificates, that means renewing 30 days before expiration. See
https://letsencrypt.org/docs/integration-guide/ for details. -
When running the task
/usr/local/psa/admin/plib/modules/letsencrypt/scripts/keep-secured.php
at Tools & Settings > Scheduled Tasks, it fails. - Multiple Let's Encrypt certificates are issued for different domains in Plesk
-
The following error message can be observed in
/var/log/plesk/panel.log
:CONFIG_TEXT: PHP Fatal error: Allowed memory size of 536870912 bytes exhausted (tried to allocate 8192 bytes) in /usr/local/psa/admin/plib/vendor/plesk/zendframework/library/Zend/Db/Statement/Pdo.php on line 228
PHP Fatal error: Allowed memory size of 536870912 bytes exhausted (tried to allocate 65536 bytes) in /usr/local/psa/admin/plib/dnsmng.php on line 8
Cause
Product issue:
-
#EXTLETSENC-644 "Automatic renewal of Let’s Encrypt certificates no longer fails when a domain has a large number of secured subdomains (more than 200)."
Fixed in:- Let’s Encrypt 2.10.0 28 May 2020
Resolution
Workaround
If update is not possible for some reason you may try the following
Until a fix becomes available you may use the following workaround:
-
Go to Tools & Settings > Scheduled Tasks and click on the
/usr/local/psa/admin/plib/modules/letsencrypt/scripts/keep-secured.php
Task. -
Change the command section to the following:
CONFIG_TEXT: /usr/local/psa/admin/bin/php -dmemory_limit=-1 -dauto_prepend_file=sdk.php '/usr/local/psa/admin/plib/modules/letsencrypt/scripts/keep-secured.php'
Note: This can cause highly increased memory usage, thus it is recommended to check the available memory first.
Comments
2 comments
Hello,
Every day, at 6:00 am, I get this error in panel.log, on Plesk Onyx Version 17.8.11 Update #53 (CentOS 7.6). Could this be the same issue? I also received an e-mail that a Let's Encrypt certificate was going to expire soon.
[2019-05-23 06:00:03.732] ERR [1] PHP Warning: Error while sending QUERY packet. PID=3781; File: /usr/local/psa/admin/plib/vendor/plesk/zendframework/library/Zend/Db/Statement/Pdo.php, Line: 228
[2019-05-24 06:00:03.389] ERR [1] PHP Warning: Error while sending QUERY packet. PID=11209; File: /usr/local/psa/admin/plib/vendor/plesk/zendframework/library/Zend/Db/Statement/Pdo.php, Line: 228
Best Regards,
Bob
Hello Bob,
Your issue seems to be a bit different, I left a comment for you under another article.
Please sign in to leave a comment.