Plesk で Lets Encrypt の更新に失敗する。証明書を発行できません。Could not secure domains

カテゴリー：Plesk

記事作成日：2019.12.23

Plesk Obsidian バージョン 18.0.21 Update#5 CentOS Linux7.7 にてLets Encrypt の更新に失敗したというメールが届いた。

Could not secure domains of example (login xxxxxx) with Let's Encrypt certificates. Please log in to Plesk and secure the domains listed below manually.

手動で保護が必要とのこと。

## Plesk内の表示

```nohighlight
エラー: example.com 用の Let's Encrypt SSL/TLS 証明書を発行できませんでした。
詳細
Invalid response from https://acme-v02.api.letsencrypt.org/acme/order/63114583/905220149.
Details:
Type: urn:ietf:params:acme:error:malformed
Status: 404
Detail: No order for ID 905220149
```

```nohighlight
Error: Could not issue a Let's Encrypt SSL/TLS certificate for example.com.
Details
Invalid response from https://acme-v02.api.letsencrypt.org/acme/order/63114583/905220149.
Details:
Type: urn:ietf:params:acme:error:malformed
Status: 404
Detail: No order for ID 905220149
```

## 解決方法

こちらに書いてある通り。<br>
<a href="https://support.plesk.com/hc/en-us/articles/360020966774-Unable-to-install-a-Let-s-Encrypt-certificate-Order-s-status-pending-is-not-acceptable-for-finalization-or-No-order-for-ID" target="_blank">https://support.plesk.com/hc/en-us/articles/360020966774-Unable-to-install-a-Let-s-Encrypt-certificate-Order-s-status-pending-is-not-acceptable-for-finalization-or-No-order-for-ID</a>

```nohighlight
egrep -Ril example.com /usr/local/psa/var/modules/letsencrypt/orders

(output)
/usr/local/psa/var/modules/letsencrypt/orders/c92788fed3b07d20e4ad823731285d30f0c88dcb.json
```

```nohighlight
rm /usr/local/psa/var/modules/letsencrypt/orders/c92788fed3b07d20e4ad823731285d30f0c88dcb.json
```

## PleskにてLet's Encrypt 更新

通常の要領で証明書をインストールする。

## 以下のメールがPleskから届いた場合も同じ手順で。

以下のメールが届いた場合「LetsEncryptの有効期限が迫っているが更新できない」といった内容だと思われますが、LetsEncryptの登録が重複している可能性が有ります。<br>
上記手順で古い登録を削除すれば大丈夫です。<br>
どれが古いか判定できない場合は、すべて削除して、再登録すれば大丈夫。

```nohighlight
Could not secure domains of xxxxxxxx (login xxxxxxxxx) with Let's Encrypt certificates. Please log in to Plesk and secure the domains listed below manually.
Securing of the following domains has failed:

<none>

The following domains have been secured without some of their Subject Alternative Names:

<none>

Could not renew Let's Encrypt certificates for xxxxxxxx (login xxxxxxxx). Please log in to Plesk and renew the certificates listed below manually.
Renewal of the following Let's Encrypt certificates has failed:

* 'Lets Encrypt domain.tld' [days to expire: 22]
[-] domain.tld
[-] www.domain.tld

Invalid response from https://acme-v02.api.letsencrypt.org/acme/authz-v3/xxxxxx.
Details:
Type: urn:ietf:params:acme:error:unauthorized
Status: 403
Detail: Invalid response from https://domain.tld/.well-known/acme-challenge/xxxxxxxxxxxxxxx [000.000.000.000]: "<html>\r\n<head><title>404 Not Found</title></head>\r\n<body>\r\n<center><h1>404 Not Found</h1></center>\r\n<hr><center>nginx</center>\r\n"

The following Let's Encrypt certificates have been renewed without some of their Subject Alternative Names:

<none>

Legend:
[+] This domain is secure. The domain's SSL/TLS certificate from Let's Encrypt has been issued/renewed.
[-] This domain is not secure. Either the domain's SSL/TLS certificate from Let's Encrypt could not be issued/renewed or the domain name was excluded from the certificate. Renew the certificate manually or request a new one to secure this domain.
```

Eメール(任意)
送信内容