1. Please take a little time for this simple survey! Thank you for participating!
    Dismiss Notice
  2. Dear Pleskians, please read this carefully! New attachments and other rules Thank you!
    Dismiss Notice
  3. Dear Pleskians, I really hope that you will share your opinion in this Special topic for chatter about Plesk in the Clouds. Thank you!
    Dismiss Notice

Can't assign SSL Certificate to my domain

Discussion in 'Plesk for Linux - 8.x and Older' started by GameCompany, Sep 14, 2008.

  1. GameCompany

    GameCompany Guest

    0
     
    Hello, and thank you for reading this thread!

    I'm currently having a problem with SSL certificates.

    I've purchased and uploaded my certificate to my domain's certificates list, as shown on this picture:
    [​IMG]

    However, when I try setting up my domain ("Setup" page for this domain) I cannot assign it the certificate that I've just created! I have no dropdown list or anything, just "default certificate (administrator's repository)".
    [​IMG]

    I've searched the internet and this forum more particularly and ran into what seemed like similar issues, and found a possible solution:
    http://forum.swsoft.com/showthread.php?t=35761&highlight=certificate
    basically editing the http.include file in the /conf folder, replacing the SSLCertificateFile value with the correct certificate found in /usr/local/psa/var/certificates.
    Well, I happen to have 4 files in this folder. I've tried all 4: out of the 4, 3 of them still appear as a default "plesk" certificate and thus are recognized as invalid by webbrowser; and the remaining one just won't work -- httpd refuses to restart (says "FAILED").

    Does anyone have a clue?

    Again, thanks for your time!
     
  2. GameCompany

    GameCompany Guest

    0
     
  3. faris

    faris Guest

    0
     
    One way to deal with this is to use the Server -> Certificate sercion rather than worrying about trying to deal with it at the domain level.

    Copy the Private key from the certificate you created at the domain level.

    Go to Server -> Certificates and add a new certificate

    Copy the Private Key, the certificate you got from GoDaddy (standardd certificates are fine) and BOTH of the CA certificates (there are two -- they call it combined or something, so you end up with two CA certificates, one after the other, each with their own BEGIN/END.

    Once the certificxate is in place, assign it as the default certificate for the IP addreess you will already have assigned to the domain (Server -> IP).

    Then go to the domain, and select the certificate from the drop down.

    Faris.
     
  4. GameCompany

    GameCompany Guest

    0
     
    Well thanks for your reply!
    It worked almost exactly as you said... except for one major problem.

    Here's what I've done:
    1) created the certificate in the Server Certificate (which is the "administrator's repository" I guess)
    2) set my new certificate as default certificate for domains
    3) went to the "IP" configuration page, and selected my new certificate in the drop down list
    now, all my domains are using the new certificate.
    However, the certificate is only valid for ONE of my domains.

    You said this:
    When I go to the domain setup page, I still don't have a drop down list, I can't select the certificate for the domain. It has to use the default one apparently.
    Like on this picture:
    http://gbatemp.net/up/cert_002.jpg

    I happen to have 3 domains that require different SSL certificates, hosted on the same server. I really need to be able to select different certificates for each domains...
     
  5. breun

    breun Golden Pleskian

    29
     
    Joined:
    Jun 28, 2005
    Messages:
    1,647
    Likes Received:
    0
    You need exclusive IP addresses for domains with SSL certificates.
     
  6. GameCompany

    GameCompany Guest

    0
     
    Well, that's an important detail I didn't know. Thank you very much for the precision!
     
  7. breun

    breun Golden Pleskian

    29
     
    Joined:
    Jun 28, 2005
    Messages:
    1,647
    Likes Received:
    0
    Note that that is not a Plesk limitation, but just the way HTTPS works. So, always get a dedicated IP address for sites with SSL certificates.
     
  8. GameCompany

    GameCompany Guest

    0
     
    Yeah, I understand that. I will be able to obtain over 8 additional IP addresses which I'm setting up now.
    Thanks again for your help.

    I've also found a way to manually configure the certificate file for a domain (apparently).
    Once you add a certificate to Plesk, you can download a .PEM file using the download icon on the right of each item in the list of certificates.
    Upload that .PEM file somewhere on your server, and then edit the http.include file in the /conf folder of your domain. Replace the SSLCertificateFile value by the path of the PEM file you just uploaded.
    ^ this worked for me.
     
  9. breun

    breun Golden Pleskian

    29
     
    Joined:
    Jun 28, 2005
    Messages:
    1,647
    Likes Received:
    0
  10. GameCompany

    GameCompany Guest

    0
     
    about this remark, if I understand correctly 1 certificate = 1 IP address.
    But is it possible to purchase a special certificate that will cover multiple domains?
    So that I only have to purchase 1 certificate that is valid for all the domains on my server?

    Edit:
    I think I've found the answer to my question: http://help.godaddy.com/article/3908?isc=psr1

    Thanks everyone!
     
  11. ecja

    ecja Guest

    0
     
    Please click one of the Quick Reply icons in the posts above to activate Quick Reply.
     
  12. whipworks

    whipworks New Pleskian

    3
    70%
    Joined:
    Feb 25, 2015
    Messages:
    7
    Likes Received:
    0
    Hi guys. I'm currently having the same issue with assigning SSL certs for one domain. I've renewed the domain. Have a static IP assign. But when I try to add it, the domain isn't available on the drop down menu for me to assign. It will usually have domains available for me to choose so I can assign it to the correct domain. But this one just says "NONE". Any reason why the domains doesn't show up on the drop down box? Thanks in advance :)
     
Loading...