Issue ERR [extension/sslit] Could not get config vars: To read x509 certificate from file or string use methods PleskExt\SslIt\OpenSsl\X509Certificate::from

[pauls1919]

Server operating system version

CloudLinux 8.6 x86_64

Plesk version and microupdate number

Plesk Obsidian 18.0.50.0

after plesk updated to 18.0.50 we receive a lots of tickets regarding SSL IT extension

Could not secure domains of .............. (login ...................) with Let`s Encrypt certificates. Please log in to Plesk and secure the domains listed below manually.
Securing of the following domains has failed:

** '.....................................l' **
To read x509 certificate from file or string use methods PleskExt\SslIt\OpenSsl\X509Certificate::fromFile() or PleskExt\SslIt\OpenSsl\X509Certificate::fromString()


panel.log

[2023-02-06 14:46:51.711] 4101145:63e104c8a19d0 ERR [extension/sslit] Could not get config vars: To read x509 certificate from file or string use methods PleskExt\SslIt\OpenSsl\X509Certificate::fromFile() or PleskExt\SslIt\OpenSsl\X509Certificate::fromString()
[2023-02-06 14:46:51.928] 4101145:63e104c8a19d0 ERR [extension/sslit] Could not get config vars: To read x509 certificate from file or string use methods PleskExt\SslIt\OpenSsl\X509Certificate::fromFile() or PleskExt\SslIt\OpenSsl\X509Certificate::fromString()
[2023-02-06 14:46:52.181] 4101145:63e104c8a19d0 ERR [extension/sslit] Could not get config vars: To read x509 certificate from file or string use methods PleskExt\SslIt\OpenSsl\X509Certificate::fromFile() or PleskExt\SslIt\OpenSsl\X509Certificate::fromString()

 

[Peter Debik]

@pauls1919 I think you should open a support ticket on this issue. Information provided is not sufficient for a issue report as this will end up in a request by developers to check it on the server directly anyway. So the fastest way to real results will be a support ticket in this case with allowing engineers SSH access to the machine.

 

[pauls1919]

thanks, asked our plesk license provider about this issue.
But is after the plesk update done today.

 

[Peter Debik]

In case that does not work, you can get support directly:

How to get support directly from Plesk?

Question How to get support directly from Plesk? Answer Lease-type Plesk licenses purchased directly from Plesk running on supported Plesk version include full free support. Perpetual-type license...

support.plesk.com

 

[Peter Debik]

Here's an update on the status of this: We've logged to issues that are probably causing this case. For both a fix is already being worked on. The tracking ID in case you need to contact support on it is [EXTLETSENC-1182].

 

[pauls1919]

we got another tracking ID reply from support, The reported error comes from bug with ID EXTLETSENC-1177, which should be fixed
for now i just disabled SSLIT cron in order to stop all mails coming in

 

[Benemortasia]

we got another tracking ID reply from support, The reported error comes from bug with ID EXTLETSENC-1177, which should be fixed
for now i just disabled SSLIT cron in order to stop all mails coming in

Fixed the day after you posted

https://support.plesk.com/hc/en-us/articles/9969383318546-Let-s-Encrypt-certificate-issue-for-domains-or-Plesk-Panel-Failed-to-read-x509-certificate-from-file-or-string-use-methods

Cause​

Plesk bug EXTLETSENC-1182.

Fixed in:

• Let's Encrypt 3.1.4 - 8 February 2023

Resolution​

• Update Let's Encrypt extension to 3.1.4 version or later.

Note: If error comes from SSL It!, this extension update should also fix the issue.

 

[Benemortasia]

Fixed the day after you posted

https://support.plesk.com/hc/en-us/articles/9969383318546-Let-s-Encrypt-certificate-issue-for-domains-or-Plesk-Panel-Failed-to-read-x509-certificate-from-file-or-string-use-methods

Cause​

Plesk bug EXTLETSENC-1182.

Fixed in:

• Let's Encrypt 3.1.4 - 8 February 2023

Resolution​

• Update Let's Encrypt extension to 3.1.4 version or later.

Note: If error comes from SSL It!, this extension update should also fix the issue.

Note: 2 days this got posted, looking very similar.
Only this time its the OpenSsl PrivateKey having that issue.

https://support.plesk.com/hc/en-us/articles/9891105898642-Unable-to-upload-Certificate-PEM-file-to-Plesk-domain-To-read-key-from-file-or-string-use-methods-PleskExt-SslIt-OpenSsl-PrivateKey-fromFile-and-PleskExt-SslIt-OpenSsl-PrivateKey-fromString-

Symptoms​

• A purchased or self-signed certificate can not be uploaded to a Plesk domain as .pem file with the error:
  To read key from file or string use methods PleskExt\SslIt\OpenSsl\PrivateKey::fromFile() and PleskExt\SslIt\OpenSsl\PrivateKey::fromString()

Cause​

This is a Plesk SSL It! Extension bug with ID EXTSSLIT-1993 which will be fixed in future updates.

Resolution​

Until the bug is fixed, as a workaround:

• Open the certificate .pem file in any text editor and upload this by text parts as described on this article.