Issue Can not re issue Lets Encrypt SSL Certificat

[elChupete]

Server operating system version

Ubuntu 22.04

Plesk version and microupdate number

18.0.71 Update #2

Hi ,

My LE SSL Certificates are not being autorenewed. I get following error
Could not renew Let`s Encrypt certificates for admin (login admin). Please log in to Plesk and renew the certificates listed below manually.
Renewal of the following Let`s Encrypt certificates has failed:

** 'Lets Encrypt zilz.hamburg' [days to expire: 26] **
[-]


Invalid response from https://acme-v02.api.letsencrypt.org/acme/authz/1823654157/582469126971
Details:
Type: urn:ietfarams:acme:error:connection
Status: 400
Detail: 212.132.73.15: Fetching https://www.mydomain.com/.well-known/acme-challenge/gyFnutZ4Z6AHoPukt7ReBVgqd9Pkomcmu-0zKF_WKMU: Redirect loop detected

I had same issue 3 month ago but found workaround. Unfortunately I do not remember the workaround.

However I nailed down the issue to Plesk not giving access to .well-knowm/acme-challenge/... When I try to access via browser any file below, I get 403 forbidden error.

I tried to give access via http directive
<Directory "/var/www/vhosts/mydomain/httpdocs/mydomain/.well-known/acme-challenge/">
Options None
AllowOverride None
Require all granted
</Directory>

but still I do not get access. Any Ideas / help?

 

[Raul A.]

The Let's Encrypt error indicates you have a redirect loop.
If you can access https://www.mydomain.com/.well-known/acme-challenge/gyFnutZ4Z6AHoPukt7ReBVgqd9Pkomcmu-0zKF_WKMU Let's Encrypt will also be able to access it. Once an attempt failed the challenge file remains in place. Thus the above URL should load the challenge file.

The challenge URL works for me, both http:// and https://. Can you try to reissue the certificate?