• We value your experience with Plesk during 2024
    Plesk strives to perform even better in 2025. To help us improve further, please answer a few questions about your experience with Plesk Obsidian 2024.
    Please take this short survey:
    https://pt-research.typeform.com/to/AmZvSXkx

  • We are developing a new feature in Plesk that will help you promote your websites or business on social media. We want to conduct a one-hour online UX test to present the prototype and collect feedback. If you are interested in the feature, please book a meeting via this link.
    Thank you in advance!
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Question Unable to use SSL unless I expose my IP?

f0rtem

f0rtem

New Pleskian
Server operating system version
Ubuntu 20.04 (64 Bit)
Plesk version and microupdate number
Plesk Obsidian Web Admin Edition 18.0.56 Update #2
Hello,

So I've installed SSL without any problems on my main domain, but when it comes to subdomains, I am having issues.

My site is proxied with Cloudflare. When I am trying to issue Let's Encrypt SSL to my subdomain, I get error
Could not issue an SSL/TLS certificate for lt.website.com
Details
Could not issue a Let's Encrypt SSL/TLS certificate for lt.website.com
The lt.website.com DNS zone contains an AAAA record, but the domain is not assigned an IPv6 address in Plesk.
To resolve the issue, either assign an IPv6 address to lt.website.com
("Websites & Domains" > "Web Hosting Access") or remove the AAAA record from the lt.website.com DNS zone.
Click to expand...

If I delete A record for the subdomain on Cloudflare, then I get an error that the domain is unresolvable.

I am certain that the moment I remove a proxy from A dns record, the SSL will be issued, but that would expose my IP address.

Hosting Settings and Web Hosting Access > IP addresses > IP address > Is set to the host IP address.

Has anyone faced this issue and can share information on how to resolve it without unproxy-ing the IP address?
 
If your server is configured with a IPv6 address the easiest solution would be to just assign a IPv6 to your (sub) domain. That way a Let's Encrypt SSL certificate can be issued. An alternative would be to install the Cloudflare SSL certificate on the sub domain. That way your no longer depended on Let's Encrypt certificates.
 
You must log in or register to reply here.

Similar threads

C
Question Plesk with Cloudflare Proxy DNS Records and Letsencrypt..
Replies
0
Views
282
cpulove
C
H
Resolved Problem with install Let's Encrypt SSL/TLS certificate
Replies
6
Views
470
HungLuu
H
M
Resolved Lets Encrypt not issuing certs for subdomains
Replies
2
Views
384
mendip_discovery
M
P
Resolved SSL issue for some visitors, but not all
Replies
2
Views
325
pieterpost
P
C
Issue Cloudflare Origin SSL Zertifikate does work and protect
Replies
1
Views
190
cpulove
C
Back
Top