• Hi, Pleskians! We are running a UX testing of our upcoming product intended for server management and monitoring.
    We would like to invite you to have a call with us and have some fun checking our prototype. The agenda is pretty simple - we bring new design and some scenarios that you need to walk through and succeed. We will be watching and taking insights for further development of the design.
    If you would like to participate, please use this link to book a meeting. We will sent the link to the clickable prototype at the meeting.
  • (Plesk for Windows):
    MySQL Connector/ODBC 3.51, 5.1, and 5.3 are no longer shipped with Plesk because they have reached end of life. MariaDB Connector/ODBC 64-bit 3.2.4 is now used instead.
  • Our UX team believes in the in the power of direct feedback and would like to invite you to participate in interviews, tests, and surveys.
    To stay in the loop and never miss an opportunity to share your thoughts, please subscribe to our UX research program. If you were previously part of the Plesk UX research program, please re-subscribe to continue receiving our invitations.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.

Issue Auto-renew of Let's Encrypt SSL fails - Windows Server - Plesk Obsidian

athsk

New Pleskian
Hi,

I am having issues with Let's Encrypt Extension in Plesk.

Currently I have many domains & subdomains on my server that are secured with Let's Encrypt SSL.
In all of these the "Keep websites secured" switch is ON and the options "Include the 'www' subdomain", "Secure webmail", "Secure mail" are checked.
But when the SSL expires it doesn't auto-renew, so I have to manually reissue all of them.


Tried this troubleshooting guide and the results
1. DNS settings are ok
2.1 website is available
2.2.1 Require SSL/TLS check box is disabled
2.2.2

  • There are no custom rewrite rules,
  • Ι cannot disable Microsoft ASP and ASP.NET support cause my sites are using this technology,
  • I cannot find folder .wel-known\acme-challenge\ in file manager of the domain
3. None of the domains are migrated from legacy Plesk versions


My server config:
Windows Server 2019 Standard
Plesk Obsidian Version 18.0.31 Update #1, last updated on Nov 19, 2020 10:46 AM
SSL It! Version 1.9.4-1310
Websites run ASP.NET 4.7
 
hello @athsk ,

first of all I'd recommend you to at least update SSLIt and LetsEncrypt extensions to their latest versions (1.9.6-1321 and 2.13.6-736 accordingly)

the second: SSLIt uses common acme-challenge directory since the midle of 2019th.
you can check is it enabled on your server by executing command
plesk ext sslit --common-challenge-dir -info

plesk ext sslit --common-challenge-dir -enable/disable
calls allows you to enable or disable common challenge diectory (this is global setting)

physically this directory can be found at %plesk_dir%var\acme-challenge\

to check that it works fine you can put some test file t o it (let's say %plesk_dir%var\acme-challenge\mytest.txt) and retrieve it by url's below:
  • http://<server-ip>/.well-known/acme-challenge/text.txt
  • http://<domain-with-problem>/.well-known/acme-challenge/text.txt

in case it can be downloaded by first URL it mean that it works in general.
in the last case (when you can't download mytest.txt) there is something wrong with IIS configuration of exactly this domain.
 
Back
Top