• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Resolved Migration error with Let`s Encrypt certificates

MPR22

New Pleskian
Dear community,

I`ve migrated on new hardware with the total content of the old server by Plesk Migrator 2.10.10-0 .
old: Debian 8.9, Plesk 17.5.3.14, Let`s Encrypt 2.2.2-144.
new: Ubuntu 16.06, Plesk 17.5.3.14, Let`s Encrypt 2.2.2-144

Now, I`ve in trouble with all certificates of one webspace. They couldn`t be migratet.
The other webspaces are all ok.

Following error (for the main-domains and alle subdomains):
----------
Plesk restore report problem:
Execution of /opt/psa/admin/plib/api-cli/domain.php --update sub.domain.com-hosting true -hst_type phys -do-not-apply-skeleton -www-root nextcloud -ssl true -same_ssl true -certificate-ref c00997371fec505a941c19a6ba00a476 -ignore-nonexistent-options failed with return code 4.
Stderr is
Unable to find certificate
----------

In the migratet database table psa -> certificates the certs are inserted, but I cannot choose them in the hosting-settings.

When I try to generate new certificates, error as follows:
----------
Invalid response from https://acme-v01.api.letsencrypt.org/acme/new-cert: Error creating new cert :: too many certificates already issued for exact set of domains: sub.domain.com. Type: urn:acme:error:rateLimited.
----------

I´ve tried migration three times, without success.
Any idea what has happened and how I can fix it?

Kind regards
Manuel

(sorry for my english)
 
Hello!
Thank you for your feedback!
You`re faced with known issue PPP-29035.

As possible W/A I can advise you to set cert_rep_id of subdomain to the same value as on subdscription in psa database. It could be done by the following steps:
1. Login as root on your destination server
2. Run "plesk db"
3. Get cert_rep_id of subscritpion:
select cert_rep_id from domains where displayName = '<your subscription name>';
4. Update cert_rep_id of child subdomain:
update domains set cert_rep_id=<id from step3> where displayName='<name of subdomain>';

After these steps certificate(s) should be available in Websites&Domains->SSL/TLS certificates for subdomain.
 
Hi

I did that, but it does not work for me. certificate(s) are not available in Websites&Domains->SSL/TLS certificates for subdomain
 
Back
Top