• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • We are looking for U.S.-based freelancer or agency working with SEO or WordPress for a quick 30-min interviews to gather feedback on XOVI, a successful German SEO tool we’re looking to launch in the U.S.
    If you qualify and participate, you’ll receive a $30 Amazon gift card as a thank-you. Please apply here. Thanks for helping shape a better SEO product for agencies!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Question Unable to use SSL unless I expose my IP?

f0rtem

f0rtem

New Pleskian
Server operating system version
Ubuntu 20.04 (64 Bit)
Plesk version and microupdate number
Plesk Obsidian Web Admin Edition 18.0.56 Update #2
Hello,

So I've installed SSL without any problems on my main domain, but when it comes to subdomains, I am having issues.

My site is proxied with Cloudflare. When I am trying to issue Let's Encrypt SSL to my subdomain, I get error
Could not issue an SSL/TLS certificate for lt.website.com
Details
Could not issue a Let's Encrypt SSL/TLS certificate for lt.website.com
The lt.website.com DNS zone contains an AAAA record, but the domain is not assigned an IPv6 address in Plesk.
To resolve the issue, either assign an IPv6 address to lt.website.com
("Websites & Domains" > "Web Hosting Access") or remove the AAAA record from the lt.website.com DNS zone.
Click to expand...

If I delete A record for the subdomain on Cloudflare, then I get an error that the domain is unresolvable.

I am certain that the moment I remove a proxy from A dns record, the SSL will be issued, but that would expose my IP address.

Hosting Settings and Web Hosting Access > IP addresses > IP address > Is set to the host IP address.

Has anyone faced this issue and can share information on how to resolve it without unproxy-ing the IP address?
 
If your server is configured with a IPv6 address the easiest solution would be to just assign a IPv6 to your (sub) domain. That way a Let's Encrypt SSL certificate can be issued. An alternative would be to install the Cloudflare SSL certificate on the sub domain. That way your no longer depended on Let's Encrypt certificates.
 
You must log in or register to reply here.

Similar threads

C
Question Plesk with Cloudflare Proxy DNS Records and Letsencrypt..
Replies
0
Views
962
cpulove
C
H
Resolved Problem with install Let's Encrypt SSL/TLS certificate
Replies
6
Views
2K
HungLuu
H
M
Resolved Lets Encrypt not issuing certs for subdomains
Replies
2
Views
1K
mendip_discovery
M
C
Question How can I secure my Mail with Letsencrypt next to Cloudflares Origin Certificate in Plesk?
Replies
4
Views
1K
cpulove
C
Daveo
Question Cloudflare/Plesk with home server
Replies
2
Views
210
Daveo
Daveo
Back
Top