Resolved LetsEncrypt licence renewal fails

[Dimitri Bailo Saksybaev]

Dear Plek community,

I have an issue updating the SSL certificates generated by LetsEncrypt. Few months ago we had a little mess were file and directory permissions were all mixed up and set wrong. After that we have recovered from most of the errors. However this one persists.

When we try to renew our SSL certificates manually or throught the cron task it does not get updated and throws the following error:

[15-Nov-2017 15:32:41 Europe/Berlin] PHP Fatal error:  Uncaught exception 'PleskExt\Letsencrypt\PleskCli\PleskCliException' with message 'Command 'service' failed with exit code 1, stdout: , stderr: Error: must run as root.' in /opt/psa/admin/plib/modules/letsencrypt/library/PleskCli/PleskCliException.php:18
Stack trace:
#0 /opt/psa/admin/plib/modules/letsencrypt/library/PleskServices/PleskServicesManager.php(35): PleskExt\Letsencrypt\PleskCli\PleskCliException::get('service', Object(PleskExt\Letsencrypt\PleskCli\PleskCliResult))
#1 /opt/psa/admin/plib/modules/letsencrypt/library/Bridge/CertificateManipulator.php(582): PleskExt\Letsencrypt\PleskServices\PleskServicesManager->getServicesStates()
#2 [internal function]: PleskExt\Letsencrypt\Bridge\CertificateManipulator->PleskExt\Letsencrypt\Bridge\{closure}(Object(PleskExt\Letsencrypt\PleskServices\PleskServicesManager))
#3 {main}
  thrown in /opt/psa/admin/plib/modules/letsencrypt/library/PleskCli/PleskCliException.php on line 18


[2017-11-15 15:33:21] ERR [panel] <span class='plesk-ext-letsencrypt--ui-problem-adviser-rate-limited-too-many-certificates-error' hidden></span>Could not issue a Let's Encrypt SSL/TLS certificate for <b>jocca.es</b>.<br/><br/>The "Certificates per Registered Domain" <a href='https://letsencrypt.org/docs/rate-limits/' target='_blank'>rate limit</a> has been exceeded for <b>jocca.es</b>. Let's Encrypt allows no more than 20 certificates to be issued per registered domain, per week.<br/><a href='https://support.plesk.com/hc/en-us/articles/115000068105' target='_blank'>See the related Knowledge Base article for details.</a><br/><span class='plesk-ext-letsencrypt--details-toggler' data-details-content-id='plesk-ext-letsencrypt--details-content-KW03jgWSVHm6evxM' onclick='PleskExt.Letsencrypt.toggleCollapsibleDetails(this); return false;'>Details</span><div class='plesk-ext-letsencrypt--details-content' id='plesk-ext-letsencrypt--details-content-KW03jgWSVHm6evxM' style='display: none'>Invalid response from https://acme-v01.api.letsencrypt.org/acme/new-cert.<br />
Details:<br />
Type: urn:acme:error:rateLimited<br />
Status: 429<br />
Detail: Error creating new cert :: too many certificates already issued for exact set of domains: jocca.es,www.jocca.es</div>

From wich, we deduced that the automatic cron task made too many requests and the emitter of the certificate throws us the last part asking to wait up until asking for a new one.

Yet the first part of the error that requires the process to be run as root is the one that gives us trouble. We have on other Plesk instalation to compare if the permissions are correct and not sure what files are wrong to fix them.

Thanks in advance,
Regards.

 

[IgorG]

stderr: Error: must run as root.

Please check that CageFS is enabled on the server:

# /usr/sbin/cagefsctl --cagefs-status
Enabled

This may be a reason of this issue.
Also it will be useful to run

# plesk repair fs

 

[Dimitri Bailo Saksybaev]

Hello IgorG

First of all thank you for your response.

We have fixed the warnings that appeared after executing

# plesk repair fs

We do not have CageFS installed on the server and not familiar with the extension.

Is there any other alternative solution or CageFS is our only way to go?

 

[IgorG]

CageFS is a feature of CloudLinux. If your Plesk installed on any another OS - just forget about this

 

[Dimitri Bailo Saksybaev]

Unfortunately our Plesk installation runs on Debian 7.0‬

Is there any other advice you could give us related to the error?

stderr: Error: must run as root

 

[IgorG]

We have fixed the warnings that appeared after executing

# plesk repair fs

Sorry, I didn't catch. Have you fixed initial issue with this command? Or not?

 

[Dimitri Bailo Saksybaev]

Sorry my bad, the problem is now solved.

We have fixed the [WARNINGS] that were listed by the repair command and have just tried right now the renewal of the certificates.

There are no more PHP errors in the logs. Thank you very much for your quick responses and wisdom!

P.S: I will proceed to mark this thread as Solved

Kind Regards,
Dimitri.