Cannot renew on plesk

Help
1

Please fill out the fields below so we can help you better. Note: you must provide your domain name to get help. Domain names for issued certificates are all made public in Certificate Transparency logs (e.g. crt.sh | example.com), so withholding your domain name here does not increase secrecy, but only makes it harder for us to provide help.

My domain is:
dynengsys.com
I ran this command:
Plesk renew
It produced this output:
Could not issue an SSL/TLS certificate for dynengsys.com
Details

Could not issue a Let's Encrypt SSL/TLS certificate for dynengsys.com. Authorization for the domain failed.

Details

Invalid response from https://acme-v02.api.letsencrypt.org/acme/authz-v3/248728900387.

Details:

Type: urn:ietf:params:acme:error:connection

Status: 400

Detail: 65.111.177.54: Fetching https://dynengsys.com/.well-known/acme-challenge/3t8HRzIIc4jLSiBbAT5Z9OYOSZG9D4UPEjXIklFJFEg: Timeout during connect (likely firewall problem)

My web server is (include version):
Apache

The operating system my web server runs on is (include version):

My hosting provider, if applicable, is:

I can login to a root shell on my machine (yes or no, or I don't know):

I'm using a control panel to manage my site (no, or provide the name and version of the control panel):
Plesk

The version of my client is (e.g. output of certbot --version or certbot-auto --version if you're using Certbot):

2

You have both an A and AAAA record in your DNS for IPv4 and IPv6. That's fine but your IPv6 address is not working right. You should correct that or remove the AAAA record.

The error shows your IPv4 address but Let's Encrypt servers prefer the AAAA IPv6. Sometimes it shows the IPv4 address in the message even when IPv6 is the cause.

This site is often helpful to test changes to your IPv6 config

3 Likes
3

Thanks, I will check on that. Fixed the SSL problem -- just had to turn off all the https and forcing options. Then it installed the new cert without complaint.

1 Like
4

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.