• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Issue pki-validation nginx and sectigo issue

psupena

New Pleskian
Hello! Hopefully someone can give me some insights into this.

So basically before, we could use file based domain control verification by just uploading txt files from SSL providers to the httpdocs/.well-known/pki-validation/ folder of sites.

However recently, (possibly after an update), ALL files under httpdocs/.well-known/pki-validation/ of ANY domain either gets redirected or 404s.

After some investigation we think it might be the vhost configuration added by the Sectigo extension



Code:
location ^~ /.well-known/pki-validation/ {
            root /var/www/vhosts/default/htdocs;             

            types { }
            default_type text/plain;

            satisfy any;
            auth_basic off;
            allow all;

            location ~ ^/\.well-known/pki-validation.*/\. {
                    deny all;
            }
    }
    #extension sectigo end **


The trouble is, not everyone can really upload to /var/www/vhosts/default/htdocs via the normal plesk GUI. You need some command line experience.

So my question is.. Is it possible to override this under the additional nginx directives? I get a "duplicate location" error if I try to alter some of these rules, or they just don't work really.

Or does this mean we are stuck getting ssls only from the plesk interface, or via CNAME verification (which we don't have access in some cases).


Our goal basically is to be able to once again upload those DCV files on httpdocs/.well-known/pki-validation/ without having to resort to using the command line to get them to /var/www/vhosts/default/htdocs .

Any help would be greatly appreciated! Thanks!
 
I faced to same problem here.

We need upload authenticate file from third party SSL issuer, and use the /.well-known/pki-validation/ path as authentication. But this path has been hijacked by Sectigo extension...

Hope some one can point us a solution.
 
Back
Top