• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

Issue Plesk & Let's Encrypt problem

K

kriszkrisz

New Pleskian
Hello!

I use Plesk 12.5.30 , and I installed the let's Encrypt 2.0.2 extension from the "Server Management/Extension" menu. After, I tried to install SSLCert for one subdomain and the alternative "www." version too.

When I tried to install the cert from the "Server Management/Extension/Let's Encrypt" section, I get this message:
Error: Let's Encrypt SSL certificate installation failed: Challenge marked as invalid. Details: Invalid response from http://sub.main.eu/.well-known/acme-challenge/xAq1z4SbeQScut0JMv3CPGygmTNkIo_Y9_Ui3vaZ5cI: "<!DOCTYPE html>
<html lang="hu">
<head>
<meta charset="utf-8" />
<title>V.I.P. Angol - Ingyenes Angol Tanulás Neked és Gyerm"
Click to expand...

When I tried to install the cert from the "Hosting Service/Domains" section ( I clicked on our subdomain, and after the "let's encrypt" icon and the install button), I get this message:
Error: Let's Encrypt SSL certificate installation failed: Challenge marked as invalid. Details: Invalid response from http://sub.main.eu/.well-known/acme-challenge/PFlNvyYui68YnWxmGmxxxd_Y9FOJ-LPrLJr-3piZ1Os: "<!DOCTYPE html>
<html lang="hu">
<head>
<meta charset="utf-8" />
<title>V.I.P. Angol - Ingyenes Angol Tanulás Neked és Gyerm"
Click to expand...

I tried these methods as admin. I tried to login Plesk as a Customer. I clicked "Websites and Domains" section, and I clicked the "let's encrypt" icon at our subdomains. I get the same error:
"Error: Let's Encrypt SSL certificate installation failed: Challenge marked as invalid. Details: Invalid response from http://sub.main.eu/.well-known/acme-challenge/26ucCf2kVN3XOYLu95g7KYM8i-z-UWTGGrzfynx2lPM: "<!DOCTYPE html>
<html lang="hu">
<head>
<meta charset="utf-8" />
<title>V.I.P. Angol - Ingyenes Angol Tanulás Neked és Gyerm""
Click to expand...

Do you know, what will the solution for this problem?
I tried some trick (make .well-known folders, etc), but i cannot solve the problem :(
 
Hi kriszkrisz,

since the Plesk Let's Encrypt Extension v2.0.3
Changes
2.0.3 (13 April 2017)
  • The extension now logs its communication with the Let's Encrypt servers in the "panel.log". This enables better troubleshooting when there are some issues with requesting a certificate.
Click to expand...
Pls. update/upgrade your extensions and afterwards, pls. repeat your steps and investigate possible issues/errors/problems in your "panel.log".
 
Hello

Having an issue renewing a Let's Encrypt Cert.
Where would I find the panel.log?

I think I need to have a look in it.
Thanks for your help.
 
I was having the same problem just now and it appears related to Nginx.

This was helpful:
Resolved - Install the certificate let's encrypt

Specifically, add this to Nginx directives at HOME > Subscription > YOUR-DOMAIN.COM > Apache & nginx Settings:
Code: 
location ~ /.well-known {
  allow all;
}

This was also helpful:
How long I got block from invalid authorization?

... if you get "Error creating new authz :: Too many invalid authorizations recently." You need to wait at least 1 hr. before trying again.

******

MY SOLUTION turned out to be that I was attempting to create the certificate prior to changing the name servers on my domain – in other words, the domain was still hosted elsewhere. My tech support guy commented...
It's making a file and then that file has to be able to be called via a curl request, so its failing."
Click to expand...

So, make sure your DNS is fully propagated before attempting to create certificates.
 
Last edited:
durian808 said:
(snip)

This was also helpful:
How long I got block from invalid authorization?

... if you get "Error creating new authz :: Too many invalid authorizations recently." You need to wait at least 1 hr. before trying again.

******

MY SOLUTION turned out to be that I was attempting to create the certificate prior to changing the name servers on my domain – in other words, the domain was still hosted elsewhere. My tech support guy commented...


So, make sure your DNS is fully propagated before attempting to create certificates.
Click to expand...

Here's a tool site that can help you determine how far out the DNS propagation has reached:
www.whatsmydns.net
 
TO: the moderator of this forum...

FYI, the notification email for Juan's comment went to the Spam folder on my Gmail account.

Here's some info that can help you solve that problem:

Subject: Issue - Plesk & Let's Encrypt problem - New reply to watched thread
SPF: NEUTRAL with IP 195.214.233.99
DMARC: FAIL

SPF should be PASS.
DMARC should be PASS.
DKIM was not used by the sending mail server, but should be.

I hope this helps.
 
durian808 said:
TO: the moderator of this forum...

FYI, the notification email for Juan's comment went to the Spam folder on my Gmail account.

Here's some info that can help you solve that problem:

Subject: Issue - Plesk & Let's Encrypt problem - New reply to watched thread
SPF: NEUTRAL with IP 195.214.233.99
DMARC: FAIL

SPF should be PASS.
DMARC should be PASS.
DKIM was not used by the sending mail server, but should be.

I hope this helps.
Click to expand...
We changed IP of forum with correct PTR record. Now all should work correctly.
 
You must log in or register to reply here.

Similar threads

D
Issue Lets Encrypt Not Successful over port 80
Replies
8
Views
307
Daiv
D
Nextgen-Networks
Issue Lets Encrypt - error in certificate renew process
2
Replies
21
Views
2K
Peter Debik
P
F
Issue Let's Encrypt Attempting to use HTTP instead of DNS Challenge for wildcard
Replies
2
Views
1K
path
P
P
Question Renew Let's encrypt cert failed after added inbound rule for aws ec2
Replies
1
Views
650
Peter Debik
P
M
Issue plesk server certificate does NOT include an ID which matches the server name
Replies
9
Views
2K
learning_curve
learning_curve
Back
Top