• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Issue Plesk & Let's Encrypt problem

K

kriszkrisz

New Pleskian
Hello!

I use Plesk 12.5.30 , and I installed the let's Encrypt 2.0.2 extension from the "Server Management/Extension" menu. After, I tried to install SSLCert for one subdomain and the alternative "www." version too.

When I tried to install the cert from the "Server Management/Extension/Let's Encrypt" section, I get this message:
Error: Let's Encrypt SSL certificate installation failed: Challenge marked as invalid. Details: Invalid response from http://sub.main.eu/.well-known/acme-challenge/xAq1z4SbeQScut0JMv3CPGygmTNkIo_Y9_Ui3vaZ5cI: "<!DOCTYPE html>
<html lang="hu">
<head>
<meta charset="utf-8" />
<title>V.I.P. Angol - Ingyenes Angol Tanulás Neked és Gyerm"
Click to expand...

When I tried to install the cert from the "Hosting Service/Domains" section ( I clicked on our subdomain, and after the "let's encrypt" icon and the install button), I get this message:
Error: Let's Encrypt SSL certificate installation failed: Challenge marked as invalid. Details: Invalid response from http://sub.main.eu/.well-known/acme-challenge/PFlNvyYui68YnWxmGmxxxd_Y9FOJ-LPrLJr-3piZ1Os: "<!DOCTYPE html>
<html lang="hu">
<head>
<meta charset="utf-8" />
<title>V.I.P. Angol - Ingyenes Angol Tanulás Neked és Gyerm"
Click to expand...

I tried these methods as admin. I tried to login Plesk as a Customer. I clicked "Websites and Domains" section, and I clicked the "let's encrypt" icon at our subdomains. I get the same error:
"Error: Let's Encrypt SSL certificate installation failed: Challenge marked as invalid. Details: Invalid response from http://sub.main.eu/.well-known/acme-challenge/26ucCf2kVN3XOYLu95g7KYM8i-z-UWTGGrzfynx2lPM: "<!DOCTYPE html>
<html lang="hu">
<head>
<meta charset="utf-8" />
<title>V.I.P. Angol - Ingyenes Angol Tanulás Neked és Gyerm""
Click to expand...

Do you know, what will the solution for this problem?
I tried some trick (make .well-known folders, etc), but i cannot solve the problem :(
 
Hi kriszkrisz,

since the Plesk Let's Encrypt Extension v2.0.3
Changes
2.0.3 (13 April 2017)
  • The extension now logs its communication with the Let's Encrypt servers in the "panel.log". This enables better troubleshooting when there are some issues with requesting a certificate.
Click to expand...
Pls. update/upgrade your extensions and afterwards, pls. repeat your steps and investigate possible issues/errors/problems in your "panel.log".
 
Hello

Having an issue renewing a Let's Encrypt Cert.
Where would I find the panel.log?

I think I need to have a look in it.
Thanks for your help.
 
I was having the same problem just now and it appears related to Nginx.

This was helpful:
Resolved - Install the certificate let's encrypt

Specifically, add this to Nginx directives at HOME > Subscription > YOUR-DOMAIN.COM > Apache & nginx Settings:
Code: 
location ~ /.well-known {
  allow all;
}

This was also helpful:
How long I got block from invalid authorization?

... if you get "Error creating new authz :: Too many invalid authorizations recently." You need to wait at least 1 hr. before trying again.

******

MY SOLUTION turned out to be that I was attempting to create the certificate prior to changing the name servers on my domain – in other words, the domain was still hosted elsewhere. My tech support guy commented...
It's making a file and then that file has to be able to be called via a curl request, so its failing."
Click to expand...

So, make sure your DNS is fully propagated before attempting to create certificates.
 
Last edited:
durian808 said:
(snip)

This was also helpful:
How long I got block from invalid authorization?

... if you get "Error creating new authz :: Too many invalid authorizations recently." You need to wait at least 1 hr. before trying again.

******

MY SOLUTION turned out to be that I was attempting to create the certificate prior to changing the name servers on my domain – in other words, the domain was still hosted elsewhere. My tech support guy commented...


So, make sure your DNS is fully propagated before attempting to create certificates.
Click to expand...

Here's a tool site that can help you determine how far out the DNS propagation has reached:
www.whatsmydns.net
 
TO: the moderator of this forum...

FYI, the notification email for Juan's comment went to the Spam folder on my Gmail account.

Here's some info that can help you solve that problem:

Subject: Issue - Plesk & Let's Encrypt problem - New reply to watched thread
SPF: NEUTRAL with IP 195.214.233.99
DMARC: FAIL

SPF should be PASS.
DMARC should be PASS.
DKIM was not used by the sending mail server, but should be.

I hope this helps.
 
durian808 said:
TO: the moderator of this forum...

FYI, the notification email for Juan's comment went to the Spam folder on my Gmail account.

Here's some info that can help you solve that problem:

Subject: Issue - Plesk & Let's Encrypt problem - New reply to watched thread
SPF: NEUTRAL with IP 195.214.233.99
DMARC: FAIL

SPF should be PASS.
DMARC should be PASS.
DKIM was not used by the sending mail server, but should be.

I hope this helps.
Click to expand...
We changed IP of forum with correct PTR record. Now all should work correctly.
 
You must log in or register to reply here.

Similar threads

M
Resolved Lets Encrypt not issuing certs for subdomains
Replies
2
Views
273
mendip_discovery
M
D
Issue Lets Encrypt Not Successful over port 80
Replies
8
Views
2K
Daiv
D
Nextgen-Networks
Issue Lets Encrypt - error in certificate renew process
2
Replies
21
Views
4K
Peter Debik
P
R
Issue SSL/TLS cert for mail server not updating (Lets Encrypt)
Replies
2
Views
889
tessa67
T
F
Issue Let's Encrypt Attempting to use HTTP instead of DNS Challenge for wildcard
Replies
2
Views
2K
path
P
Back
Top