• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

Issue Lets Encrypt renew problem - Type: urn:ietf:params:acme:error:unauthorized

ViaHosting

Basic Pleskian
The Lets Encrypt certificates hasn't renewed automatically.

When trying to renew manually, I got the following error:

Não foi possível emitir um certificado SSL/TLS para xtpo.com.
Detalhes
Não foi possível emitir um certificado Let's Encrypt SSL/TLS para xtpo.com. Autorização para o domínio falhou.
Detalhes
Invalid response from https://acme-v02.api.letsencrypt.org/acme/authz-v3/460xxxxxx.

Details:

Type: urn:ietf:params:acme:error:unauthorized

Status: 403

Detail: Incorrect TXT record "yTCcD5h3L2xg_R9SmJmbEqRbnXU36Z_o0rgnGVyo0qY" found at _acme-challenge.xtpo.com


After investigating, I discovery that the problem is Lets Encrypt module is not updating DNS record.
If there is a "_acme-challenge" record, it is not update.
It there isn't a record, it's not created.

You can see on image 2-DNS.png, that the record "_acme-challenge" has the wrong value, even after the prior step (image 1-CERTIFICADO.png).

The problem starts on Plesk Obsidian 18.0.26.
Tried to upgrade to version 18.0.27, but the problem remains.

The temporarily soluction is update the DNS record manually, before continue the renew process.


Complementing the information:
In Linux versions, the problem is a little bit different.
The certificate isn't renewed automatically also,

but it works if you try manually.




------------------------------------------
SO: Microsoft Windows Server 2019
Produto: Plesk Obsidian
Versão 18.0.27, última atualização em 15/05/2020 17:37
 

Attachments

  • 1-CERTIFICADO.PNG
    1-CERTIFICADO.PNG
    82.1 KB · Views: 41
  • 2-DNS.PNG
    2-DNS.PNG
    8.4 KB · Views: 39
  • 3-ERRO.PNG
    3-ERRO.PNG
    53 KB · Views: 35
Last edited:
Back
Top