On October 19, 2021, we have enabled single-sign-on for our Plesk Support Center to provide a seamless login/account experience. This implies that you’ll be able to use a single account across any of our web-facing properties.
If you had already registered your account at MyPlesk.com/Plesk360/Platform360 please use one for login. Otherwise please re-register it using the same email address as your existing Zendesk login (support account). It’s essential that you use the same email address on our support center to ensure that your tickets stay attached to the same account.

Articles in this section

See more

How to install Let's Encrypt certificate via CLI for a domain in Plesk for Linux?

Avatar
Miguel Monteiro
Updated
Follow
Plesk for Linux kb: how-to ext: le ABT: Group A

Applicable to:

  • Plesk for Linux

Question

How to install Let's Encrypt certificate via CLI for a domain in Plesk?

Answer

It's possible to use Let's Encrypt CLI utility for installing certificates as shown below:

  1. Connect to the server via SSH

  2. Run the following command to list all available options:

    # plesk bin extension --exec letsencrypt cli.php --help

  • Example of issuing a certificate for domain example.com including webmail:

    # plesk bin extension --exec letsencrypt cli.php -d example.com -d webmail.example.com -m jdoe@example.com

Additional information

How to secure Plesk and mail server with Let's Encrypt certificate via CLI?

Comments

4 comments

Sort by Date Votes
  • Avatar
    John Romano D'Orazio

    Is it possible to issue a request for a wildcard certficate with DNS challenge from the CLI ?

    I would like to add a fourth level domain to my certificate but I can't do it from the plesk interface...

    0
    Comment actions Permalink
  • Avatar
    Ivan Postnikov

    Hello John Romano D'Orazio

    The CLI can manage wildcard certificates issue. To see details, use the plesk ext sslit --help command.

    Make sure that SSL It! extension is installed on your server.

    0
    Comment actions Permalink
  • Avatar
    DH

    Do the old binaries exist anywhere?  Or does this new system support generating a cert that is not tied to a specific domain?  Our staff had been generating LE certs for alias domains while onboarding new websites, using the binaries at

    /usr/local/psa/var/modules/letsencrypt/venv/bin/letsencrypt

    This no longer works.  We were forced to do this because Plesk does not let you generate an LE cert specific to ONLY an alias domain, while the primary domain remains pointed elsewhere.  This new system appears to have the same issue as the GUI, where it will not let you generate a cert for only an alias domain, it requires you use the primary domain too, which doesn't work if it is not yet live.

    0
    Comment actions Permalink
  • Avatar
    Michael Best

    I know it's a year too late to answer the previous questions about issuing wildcards from the command line.

    I think the SSL It! command line tool is probably too complicated to figure out how to use from the command line --help documentation, but this documentation web page does a pretty good job of showing how to use it https://docs.plesk.com/en-US/obsidian/administrator-guide/website-management/websites-and-domains/advanced-website-security/securing-connections-with-ssltls-certificates/securing-connections-with-the-ssl-it!-extension.80001/

    0
    Comment actions Permalink

Please sign in to leave a comment.

Have more questions? Submit a request

Related articles