• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion
  • Inviting everyone to the UX test of a new security feature in the WP Toolkit
    For WordPress site owners, threats posed by hackers are ever-present. Because of this, we are developing a new security feature for the WP Toolkit. If the topic of WordPress website security is relevant to you, we would be grateful if you could share your experience and help us test the usability of this feature. We invite you to join us for a 1-hour online session via Google Meet. Select a convenient meeting time with our friendly UX staff here.

Resolved All Websites work under http2 except my Plesk Control Panel

Tristan

New Pleskian
Hi There,

A little issue. I want my Plesk Control Panel also to use http2. But this is not the case.

Weird thing is that sites I host do use http2 only the control panel doesn't.

I would normally access the control panel through: https://mydomain.com:8443

I also modified /usr/local/psa/admin/conf/templates/default/domain/nginxDomainVirtualHost.php with the ssl http2 option. I found on another website and rebuild the nginx virtual hosts config. Restarted all services. But still no luck.

Did anyone else encounter this problem and might have a good tip for me?

Thanks, James
 
The Plesk webserver on port 8443 is a standalone webserver (nginx), customized by Plesk and independent of the webserver(s) used for your websites.
You'll find the config file for it here: /etc/sw-cp-server/conf.d/plesk.conf

But I suggest you don't modify that as it may get overwritten by a Plesk update or you may break something.

See also this thread: Question - How to activate http/2 for Plesk panel
 
Thanks! I've added http2 to the listen 8443 line in /etc/sw-cp-server/conf.d/plesk.conf "listen 8443 ssl http2;"
Also I added the same ssl ciphers as in my default nginx config:

/etc/sw-cp-server/conf.d/plesk.conf

server_names_hash_bucket_size 64;

server {
listen 8443 ssl http2;
listen 8880;
listen 127.0.0.1:8880 default_server;
include conf.d/*ipv6_ports.inc;


ssl_certificate /opt/psa/admin/conf/httpsd.pem;
ssl_certificate_key /opt/psa/admin/conf/httpsd.pem;

include conf.d/*plesk.inc;
include conf.d/*wpb.inc;
}


/etc/sw-cp-server/conf.d/ssl.conf

ssl_ciphers EECDH+AESGCM+AES128:EECDH+AESGCM+AES256:EECDH+CHACHA20:EDH+AESGCM+AES128:EDH+AESGCM+AES256:EDH+CHACHA20;
ssl_protocols TLSv1 TLSv1.1 TLSv1.2;
ssl_prefer_server_ciphers on;

Thanks for the help! I just wanted it working. I know it can be overwritten but now I know how it works :).
 
Back
Top