Hello! Hopefully someone can give me some insights into this.
So basically before, we could use file based domain control verification by just uploading txt files from SSL providers to the httpdocs/.well-known/pki-validation/ folder of sites.
However recently, (possibly after an update), ALL files under httpdocs/.well-known/pki-validation/ of ANY domain either gets redirected or 404s.
After some investigation we think it might be the vhost configuration added by the Sectigo extension
The trouble is, not everyone can really upload to /var/www/vhosts/default/htdocs via the normal plesk GUI. You need some command line experience.
So my question is.. Is it possible to override this under the additional nginx directives? I get a "duplicate location" error if I try to alter some of these rules, or they just don't work really.
Or does this mean we are stuck getting ssls only from the plesk interface, or via CNAME verification (which we don't have access in some cases).
Our goal basically is to be able to once again upload those DCV files on httpdocs/.well-known/pki-validation/ without having to resort to using the command line to get them to /var/www/vhosts/default/htdocs .
Any help would be greatly appreciated! Thanks!
So basically before, we could use file based domain control verification by just uploading txt files from SSL providers to the httpdocs/.well-known/pki-validation/ folder of sites.
However recently, (possibly after an update), ALL files under httpdocs/.well-known/pki-validation/ of ANY domain either gets redirected or 404s.
After some investigation we think it might be the vhost configuration added by the Sectigo extension
Code:
location ^~ /.well-known/pki-validation/ {
root /var/www/vhosts/default/htdocs;
types { }
default_type text/plain;
satisfy any;
auth_basic off;
allow all;
location ~ ^/\.well-known/pki-validation.*/\. {
deny all;
}
}
#extension sectigo end **
The trouble is, not everyone can really upload to /var/www/vhosts/default/htdocs via the normal plesk GUI. You need some command line experience.
So my question is.. Is it possible to override this under the additional nginx directives? I get a "duplicate location" error if I try to alter some of these rules, or they just don't work really.
Or does this mean we are stuck getting ssls only from the plesk interface, or via CNAME verification (which we don't have access in some cases).
Our goal basically is to be able to once again upload those DCV files on httpdocs/.well-known/pki-validation/ without having to resort to using the command line to get them to /var/www/vhosts/default/htdocs .
Any help would be greatly appreciated! Thanks!