Forwarded to devs [FIX FOUND] Webmail, SSL with error HRESULT: 0x80070520 websrvmng

[Frank.P]

User name: Javier P.

TITLE

Let's Encrypt issue when renew

PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE

Plesk Obsidian, Version 18.0.27 Update #1, Windows 2016

PROBLEM DESCRIPTION

When certificate is set in mail setting "SSL / TLS certificate for mail" and Let's Encrypt renew and try to set the new into "SSL / TLS certificate for mail" raise an error and leave blank this setting, MailEnable not set any certificate and in Windows Store no cert too

The renew work right, the problem is copy into Windows Store when the cert exists

STEPS TO REPRODUCE

When is set and Let's Encrypt renew delete cert and not cerate the new

ACTUAL RESULT

see description

EXPECTED RESULT

The renew work right, the problem is copy into Windows Store when the cert exists.

Delete cert in Windows store and then create cert without error

ANY ADDITIONAL INFORMATION

2020/06/09 18:57:55.111 11120 9476 Error: Una sesión de inicio especificada no existe. Es posible que haya finalizado. (Excepción de HRESULT: 0x80070520)
In Microsoft.Web.Administration module
Exception type: System.Runtime.InteropServices.COMException
en Microsoft.Web.Administration.Interop.IAppHostMethodInstance.Execute()
en Microsoft.Web.Administration.Binding.AddSslCertificate(Byte[] certificateHash, String certificateStoreName)
en Microsoft.Web.Administration.BindingManager.Save()
en Microsoft.Web.Administration.ServerManager.CommitChanges()
en ServerManagerFactory.commit()
en IISServerManager.commit(IISServerManager* )

at Commit common changes(WebServerManager::updateWebMailLinks line 2548)
at updateWebMailLinks()(WebServerManager::updateWebMailLinks line 2559)
at execute console command --update-webmail-links(vconsoleapp::start line 93)
at execute "C:\Program Files (x86)\Plesk\admin\bin64\websrvmng" --update-webmail-links "--config=C:/Program Files (x86)/Plesk/PrivateTemp/iuwfcfb67a1.tmp"(vconsoleapp::run line 110)







[2020-06-09 18:57:55] ERR [panel] "C:\Program Files (x86)\Plesk\admin\bin64\websrvmng" --update-webmail-links "--config=C:/Program Files (x86)/Plesk/PrivateTemp/iuwfcfb67a1.tmp" failed with code 1.

stdout:
Una sesión de inicio especificada no existe. Es posible que haya finalizado. (Excepción de HRESULT: 0x80070520)
In Microsoft.Web.Administration module
Exception type: System.Runtime.InteropServices.COMException
en Microsoft.Web.Administration.Interop.IAppHostMethodInstance.Execute()

en Microsoft.Web.Administration.Binding.AddSslCertificate(Byte[] certificateHash, String certificateStoreName)

en Microsoft.Web.Administration.BindingManager.Save()

en Microsoft.Web.Administration.ServerManager.CommitChanges()

en ServerManagerFactory.commit()

en IISServerManager.commit(IISServerManager* )

at Commit common changes(WebServerManager::updateWebMailLinks line 2548)
at updateWebMailLinks()(WebServerManager::updateWebMailLinks line 2559)
at execute console command --update-webmail-links(vconsoleapp::start line 93)
at execute "C:\Program Files (x86)\Plesk\admin\bin64\websrvmng" --update-webmail-links "--config=C:/Program Files (x86)/Plesk/PrivateTemp/iuwfcfb67a1.tmp"(vconsoleapp::run line 110)

stderr:

[2020-06-09 18:57:55] ERR [extension/sslit] Could not unassign the certificate from webmail:


YOUR EXPECTATIONS FROM PLESK SERVICE TEAM

Confirm bug

 

[Frank.P]

Still happend if set any certificate in "SSL / TLS certificate for mail" and auto renew raise a error and delete old certificate from windows store and not setup the new certificate. The mail server beging crash and discard mails.

 

[Frank.P]

@IgorG can you confirm if new upgrade (Change Log for Plesk Obsidian) fixed this problem in Windows :

When SSL/TLS certificates are updated, an old certificate is now automatically deleted after it was replaced with the newly issued one. (PPPM-11953)

 

[IgorG]

@IgorG can you confirm if new upgrade (Change Log for Plesk Obsidian) fixed this problem in Windows :

If it is mentioned there that means it is fixed. Isn't it?

 

[Frank.P]

If it is mentioned there that means it is fixed. Isn't it?

I dont know if it the same problem.

 

[IgorG]

From developer:

Resolution: we are unable to reproduce this problem on our test environment, and thus suspect some problems on customer one. I recommend going to support if the problem persists. As a workaround - manual installation of cert could solve the problem.

 

[Frank.P]

[2020-07-15 08:58:30] ERR [panel] "C:\Program Files (x86)\Plesk\admin\bin64\websrvmng" --update-webmail-links "--config=C:/Program Files (x86)/Plesk/PrivateTemp/iuw7f8dc9be.tmp" failed with code 1.

stdout:
Una sesión de inicio especificada no existe. Es posible que haya finalizado. (Excepción de HRESULT: 0x80070520)
In Microsoft.Web.Administration module
Exception type: System.Runtime.InteropServices.COMException
en Microsoft.Web.Administration.Interop.IAppHostMethodInstance.Execute()

en Microsoft.Web.Administration.Binding.AddSslCertificate(Byte[] certificateHash, String certificateStoreName)

en Microsoft.Web.Administration.BindingManager.Save()

en Microsoft.Web.Administration.ServerManager.CommitChanges()

en ServerManagerFactory.commit()

en IISServerManager.commit(IISServerManager* )

at Commit common changes(WebServerManager::updateWebMailLinks line 2548)
at updateWebMailLinks()(WebServerManager::updateWebMailLinks line 2559)
at execute console command --update-webmail-links(vconsoleapp::start line 93)
at execute "C:\Program Files (x86)\Plesk\admin\bin64\websrvmng" --update-webmail-links "--config=C:/Program Files (x86)/Plesk/PrivateTemp/iuw7f8dc9be.tmp"(vconsoleapp::run line 110)

stderr:

[2020-07-15 08:58:30] ERR [extension/sslit] Could not unassign the certificate from webmail:
[2020-07-15 08:59:16] ERR [panel] "C:\Program Files (x86)\Plesk\admin\bin64\websrvmng" --update-webmail-links "--config=C:/Program Files (x86)/Plesk/PrivateTemp/iuw42c401e2.tmp" failed with code 1.

stdout:
Una sesión de inicio especificada no existe. Es posible que haya finalizado. (Excepción de HRESULT: 0x80070520)
In Microsoft.Web.Administration module
Exception type: System.Runtime.InteropServices.COMException
en Microsoft.Web.Administration.Interop.IAppHostMethodInstance.Execute()

en Microsoft.Web.Administration.Binding.AddSslCertificate(Byte[] certificateHash, String certificateStoreName)

en Microsoft.Web.Administration.BindingManager.Save()

en Microsoft.Web.Administration.ServerManager.CommitChanges()

en ServerManagerFactory.commit()

en IISServerManager.commit(IISServerManager* )

at Commit common changes(WebServerManager::updateWebMailLinks line 2548)
at updateWebMailLinks()(WebServerManager::updateWebMailLinks line 2559)
at execute console command --update-webmail-links(vconsoleapp::start line 93)
at execute "C:\Program Files (x86)\Plesk\admin\bin64\websrvmng" --update-webmail-links "--config=C:/Program Files (x86)/Plesk/PrivateTemp/iuw42c401e2.tmp"(vconsoleapp::run line 110)

stderr:

[2020-07-15 08:59:16] ERR [extension/sslit] Could not unassign the certificate from webmail:

 

[Frank.P]

@IgorG I detect the problem and I fixed.


This is the steps to reproduce the isused:

1. Step
Go to : Tools > Certificate > Create New Default Certificate

Name : New Cert

Expand/Collapse Block: Import Cert

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

2. Step
Now have 2 certificate : Default Certificate(with all domains) and New Cert (without use)

Go to : Tools > IP

(When have more of one)

> The first have set Default Certificate
> The second change certificate to New Cert and Save

3. Step
Login with reseller that have the second IP or Login to domain with this second IP

In reseller try to create new account with hosting plan and webmail enable

Expand/Collapse Block: Error when create webmail

Error: Una sesión de inicio especificada no existe. Es posible que haya finalizado. (Excepción de HRESULT: 0x80070520) In Microsoft.Web.Administration module Exception type: System.Runtime.InteropServices.COMException en Microsoft.Web.Administration.Interop.IAppHostMethodInstance.Execute() en Microsoft.Web.Administration.Binding.AddSslCertificate(Byte[] certificateHash, String certificateStoreName) en Microsoft.Web.Administration.BindingManager.Save() en Microsoft.Web.Administration.ServerManager.CommitChanges() en ServerManagerFactory.commit() en IISServerManager.commit(IISServerManager* ) at Commit common changes(WebServerManager::updateWebMailLinks line 2548) at updateWebMailLinks()(WebServerManager::updateWebMailLinks line 2559) at execute console command --update-webmail-links(vconsoleapp::start line 93) at execute "C:\Program Files (x86)\Plesk\admin\bin64\websrvmng" --update-webmail-links "--config=C:/Program Files (x86)/Plesk/PrivateTemp/iuw2d0a54a3.tmp"(vconsoleapp::run line 110) (Error code 1)

In domain if try to set Certificate for SSL/TLS or webmail raise same error.

4. Step

Go to Tools > IP and set all to Default Cerificate, then try create a client or change webmail setting, now all go right without any error.

Now is fixed and all work when delete wrong certificate, but please @IgorG send to support. Thanks