Resolved SSL It! / Lets Encrypt /wildcard auto renew not working

[fabs]

Server operating system version

Ubuntu 22.04.5 LTS

Plesk version and microupdate number

18.0.71

Hello everyone,

I have a problem that the Lets Encrypt wildcard certificate auto renew does not work. As I understand it, the plugin should automatically set the new TXT entry in the Plesk DNS Manager, is that correct? But this does not seem to happen. I got the notification e-mail and I always have to go back, reassign the certificate and update the new TXT entry in the Plesk DNS Manager of the domain.

Ubuntu 22.04.5 LTS
Plesk Obsidian 18.0.71
SSL It! 1.18.1-3161
Let's Encrypt 3.3.2-3107

Invalid response from https://acme-v02.api.letsencrypt.org/acme/authz/1636291507/55396XXXXXXXX
Details:
Type: urn:ietf:params:acme:error:unauthorized
Status: 403
Detail: Incorrect TXT record "1Cy2u-iYa3pMBaB1xGXeUMObk-uuhdAKsZLg-WeDgho" found at _acme-challenge.XXXXXXXXXX.de

I have uninstalled and reinstalled both extensions. In 2 months I'll see if that was the problem.

What could be the problem?
Thanks in advance!

 

[scsa20]

Is the DNS service running on the server? If not, the record will not be created automatically. Just go to Tools & Settings > Services Management and make sure DNS (Bind) is running.

 

[fabs]

Is the DNS service running on the server? If not, the record will not be created automatically. Just go to Tools & Settings > Services Management and make sure DNS (Bind) is running.

Hello @scsa20,

Thanks for you reply. The service "DNS-Server (BIND)" is not running, I was trying to start it but this error messages appears:

Der Start des Dienstes ist nicht möglich: Unable to manage service by dnsmng ('start', 'dns'):

I did some research on this error and came across the following pages:

https://support.plesk.com/hc/en-us/articles/12377770371095-Unable-to-start-BIND-DNS-server-in-Plesk-for-Linux-zone-NS-has-no-address-records-A-or-AAAA-or-zone-has-no-NS-records

But in my case all domains have valid NS entries. I also tried, reset to default of the template, but no luck.

 

[fabs]

Hello @scsa20,

Thanks for you reply. The service "DNS-Server (BIND)" is not running, I was trying to start it but this error messages appears:

Der Start des Dienstes ist nicht möglich: Unable to manage service by dnsmng ('start', 'dns'):

I did some research on this error and came across the following pages:

https://support.plesk.com/hc/en-us/articles/12377770371095-Unable-to-start-BIND-DNS-server-in-Plesk-for-Linux-zone-NS-has-no-address-records-A-or-AAAA-or-zone-has-no-NS-records

But in my case all domains have valid NS entries. I also tried, reset to default of the template, but no luck.

@scsa20

# apt-get purge bind9
# /usr/local/psa/admin/sbin/autoinstaller --select-release-current --install-component bind

this was the trick, now its running. I'll take a look now if the renew is working.
Thanks!