Question Renewing Let's encrypt automatically

[dtommy79]

Server operating system version

Ubuntu 22.04

Plesk version and microupdate number

Plesk Obsidian 18.0.63 Update #3

Hello,

I'm using Plesk Obsidian 18.0.63

I'm unable to automatically renew Let's encrypt.

For my domain I'm using Contabo's nameservers and in my Contabo DNS management I have my A record pointing to my server's IP address.

Also the TXT record that is required by Let's encrypt is added to my Contabo DNS manager.

Does Let's encrypt generate a new TXT reord value when renews? I'm guessing this is the problem, because after the SSL expires I have to generate a new one and update my TXT record with the new value.

Is there a way to automatically renew the SSL if I use my domain like this?

I attached screenshots about my current SSL settings:

 

[Kaspar]

Re-issue the certificate without the Wildcard option enabled. That way the DNS validation is no longer necessary and your certificates will be renewed automatically.

 

[dtommy79]

Re-issue the certificate without the Wildcard option enabled. That way there is DNS validation is no longer necessary and your certificates will be renewed automatically.

Hi,
Thanks for the reply.
If I reissue without wildcard option, will my www version still be covered?

 

[Kaspar]

There is a separate option that can be checked to include www into the certificate when re-issuing the certificate.

 

[iainh]

Re-issue the certificate without the Wildcard option enabled. That way there is DNS validation is no longer necessary and your certificates will be renewed automatically.

Hi @Kaspar ... so it is the wildcard option that triggers the _acme.challenge update at every cert rotation? If that's the case, it will save me a lot of hassle. Plesk/SSL It! like to 'encourage' including the wildcard option, but if ignoring this removes the need for TXT record update each cycle, this advise is golden

 

[Kaspar]

Hi @Kaspar ... so it is the wildcard option that triggers the _acme.challenge update at every cert rotation?

That's correct.

 

[iainh]

I can confirm, cert rotation with wildcard deselected now goes not only without challenge, but oh so quickly. You have just saved me a bunch of time. Thank you so much @Kaspar