Search results

Everything fine ... you only need to wait that the time from the HSTS Header expired, what was set before. You forbid the browser by HSTS for time x to connect without SSL .... now you must wait time x ... that's not a technical problem. Firefox works like expected.

alberta or Alberta? Another question .... if the ... cite from www.websecurity.symantec.com/en/ca" industry-leading SSL/TLS and security solutions." from Symantec are failing and you anyway only want the free certificate .... you ever tried Let's Encrypt?

You disabled HSTS now. I can verify this by SSL Server Test: led-glass.eu (Powered by Qualys SSL Labs) http://files.led-glass.eu/ is working fine for me. So any other problem left over?

Which order you used? No all browsers have this preload list. It only prevents a downgrade. So first accessing http://test.example.com will work, if there's no hsts-header on the subdomain ... Now I can't test, as your test subdomain doesn't resolve any more.

HTTP Strict Transport Security - Wikipedia sections "Limitations", "Browser support" and "Deployment best practices" This feature only works if configured properly AND your browser supports it properly.

BTW, you would need a certificate for test.led-glass.eu and led-glass.eu. you curent certificate covers only www.led-glass.eu and led-glass.eu

If you place a HSTS header, it is designed to HTTP is not working any more .... If you need http, then remove the HSTS header .... This is not a Plesk issue, it is a configuration issue ... HSTS is designed to NOT ALLOW http .... It affects ALL subdomains of the top level domain. HTTP Strict...

The behaviour with download shows up if php is not installed, not working oder not configured in apache. To help you the experts may want to know from you: Which OS in which version? Which Plesk version? Which PHP version? What fails exactly? Also the top-level domain or subdomain only? You...

What happens in access log at this moment? I had a bad bot trying downloading all pages of an onlineshop. It always tried to download 20 urls at the same time and was located in the same datacenter as my server. This caused for me, that my server always run out of php-fpm children. I blocked...

I guess it is the same what you have to type in like here: Generate a CSR for Java Web Server Make sure country is CA (capital letters two digits ISO code) and the fileld "state" is your province like Alberta We also have no states, here it is Bundesland. ;-)

comupter in suspend mode in this moment as the the DHCP lease expired is the most common reason for this "issue".

Question - change mysql version (to 5.7)

Just an idea .... is there a mix of mariadb and mysql? I read somewhere else, the table structures are different starting from mysql 5.7

By accident I found the answer to your question on stackoverflow: WARNING: [pool www] seems busy (you may need to increase pm.start_servers, or pm.min/max_spare_servers), spawning

vmware tools installed? They contain drivers to make everything faster ....

What say the event viewer -> windows protocolls -> application if you try to start the service (services.msc)?

The default values very fast produced this: WARNING: [pool example.org] seems busy or WARNING: [pool j-k-fischer-verlag.de] server reached pm.max_children setting in /var/log/php-fpm/error.log for me. (My users very often trigger ajax scripts) After I increased the values, only some bad bots...

I only thought the same test should have similar results .... Slow system: cpu: usr=1.17%, sys=72.47%, ctx=149598, majf=0, minf=23 Fast system: cpu: usr=1.89%, sys=4.85%, ctx=527464, majf=0, minf=23 You wrote "storage pool". What exactly? How connected?

cpu: usr=1.17%, sys=72.47%, ctx=149598, majf=0, minf=23 What says top? Who is consuming so much cpu?

I am not an expert on this topic, but as far what I understood, the default behaviour is, Let's encrypt needs to access the webspace for the acme challenge. There might be a second option (DNS), but if you are told the certificates expire in 20 days, the automatic renewal 30 days ahead failed...