Question Let's Encrypt / SSL It Plugins

[Aakhyan]

Hi,

As per the latest release update, the "Let's Encrypt / SSL It Plugins" are set for "automatically issue SSL/TLS certificates only for those domains that Plesk verified to be resolvable".
But why i'm still getting the message to update the DNS records? I have added the appropriate lines to the panel.ini and both the plugins are updated to the latest version.

Also, is there a way to change the DNS authentication to HTTP based authentication, like other Hosting Panels such as WHM/cPanel, DirectAdmin, etc. have?
I don't want to go with the hassle of DNS updates for about 250 domains every 90 days.

Please suggest a proper solution.

 

[Aakhyan]

Hi,

Any Update?

@IgorG, can you assist?

 

[IgorG]

The File-based authentication, or the HTTP-01 challenge as it's called in the Let's Encrypt documentation, is always enabled on the server by default. If you issue a non-wildcard certificate via Let's Encrypt, then a necessary file will be automatically created in the required directory to perform the verification.

However, if you are issuing a wildcard certificate *.example.com designed to secure any of the domain's subdomains at once, then the DNS-01 challenge will also be performed for the domain in addition to HTTP-01, which requires adding a TXT record in your domain's DNS configuration. But if your domain's DNS is managed externally and not on the Plesk server, then this TXT record would need to be added manually.

If you'd like to use only the HTTP-01 challenges for issuing and renewing certificates via Let's Encrypt without having to manually reconfigure DNS, please consider using the non-wildcard certificates. The downside to this is that you would need to issue a certificate for each domain's subdomains one by one. However, this would free you from having to create new TXT records for your domains every time a certificate is issued or renewed.

 

[Aakhyan]

Hi @IgorG

Thanks for the update!!!

It worked like a charm without selecting the Wildcard option.

But does it also work when the renewal occurs next time on these certificates? I want to be sure on this step.

 

[IgorG]

But does it also work when the renewal occurs next time on these certificates? I want to be sure on this step.

Yes, it will work.

 

[Aakhyan]

Hi @IgorG

Thanks a lot for the confirmation