Support for Plesk

[Mythos]

Hello,
I don't know if this is the right place for this kind of question, but will Plesk be supported?
As you say only lets-encrypt example.com is needed for generating and activating an SSL certificate for this domain I wonder if this works with Plesk's certificate management.
In Plesk you have to add a ca-certificate and your own certificate to a domain/subdomain to get it activated.

Kind regards,
Stefan

[schoen]

I don't think anyone working on the project now has familiarity with Plesk, but conceptually we aim to be able to interoperate with every web serving environment and every web hosting platform. There is an open protocol (ACME) that web servers or web server management environments can implement in order to request certificates from the Let's Encrypt CA and any other CAs that choose to implement ACME. So if the Plesk developers wanted to write an ACME client, they could do that and they could help Plesk users get certs that way.

We can also talk about whether Plesk has APIs or configuration files that would make it a practical target for integrating with our existing client. Potentially either approach could work.

[icez]

Plesk have a command line utility to configure the domain and certificate

First: use certificate utility to create/update domain's certificate

$PSA_BIN/certificate -c "example.com-certificate" -domain example.com -key-file /usr/local/keyfile.key -cert-file /usr/local/cert/cert.cert -cacert-file /usr/local/cert/cacert.cert -csr-file /usr/local/requests/csreq

http://download1.parallels.com/Plesk/Doc/en-US/online/plesk-unix-cli/index.htm?fileName=39009.htm

Then use subscription utility to update the web server certificate for the domain

$PSA_BIN/subscription -u example.com -certificate-name "example.com-certificate"

http://download1.parallels.com/Plesk/Doc/en-US/online/plesk-unix-cli/index.htm?fileName=37768.htm

[tillz]

I just got the first version of a plesk plugin (and reusable PHP-Class) 'working' (it's still very hacky in many parts but it's a starting point). As soon as it's ok to call it an 'alpha' version, i'll publish it on github.
If you're interested in helping me with the development and/or want to test the first 'version', feel free to contact me.

[jdkasten]

@tillz That is awesome! I am definitely interested in taking a look at it and would like to help out if I can.

[ghost]

https://plesk.uservoice.com/forums/184549-feature-suggestions/suggestions/7067777-free-ssl-project-let-s-encrypt

[ThomasWaldmann]

hmm, is this something that should be added to a) plesk or to b) letsencrypt (client)?
if a) then opening an issue there and closing this one here might be better.

[MatrixCrawler]

@tillz Any news on this? I would like to help out if i can

[dakira]

@tillz any update on your implemenation?

[kuba]

@xgin, from the Plesk team, has developed a Plesk plugin (#936) - it will soon live under https://github.com/plesk/letsencrypt-plesk.

[ghost]

Official support: https://github.com/plesk/letsencrypt-plesk

This issue can be closed.

[kuba]

We still should keep it open in order to track status of whitelisting the plugin here: https://github.com/letsencrypt/letsencrypt/blob/v0.0.0.dev20151030/letsencrypt/plugins/disco.py#L19.

[kuba]

@xgin has now a Maintainer role on PyPI index entry letsencrypt-plesk

[MazzMazz]

Could anyone tell me how to use letsencrypt-plesk? I'm still getting only pem files

[xgin]

We have released extension for Plesk 12.5: https://ext.plesk.com/packages/f6847e61-33a7-4104-8dc9-d26a0183a8dd-letsencrypt

[AmaZili]

Odin has delivered LE on Plesk 12.5 now, and with usages comes new issues....
Currently only plain domain and www subdomain are supported, but with hsts enforced, it is not possible to get access to webmail. subdomain with modern browsers.

Is there a simple (standard) method (even command line) to add subdomains to the LE certificate managed by the plesk LE addon ?

[pde]

@AmaZili what happens if you specify more domains with the -d command line flag?

[pde]

I'm also going to close this ticket, because I think this is done!

[AmaZili]

@pde never tried the command line, that was the resaon to my question...