Can't assign SSL Certificate to my domain

[GameCompany]

Hello, and thank you for reading this thread!

I'm currently having a problem with SSL certificates.

I've purchased and uploaded my certificate to my domain's certificates list, as shown on this picture:

However, when I try setting up my domain ("Setup" page for this domain) I cannot assign it the certificate that I've just created! I have no dropdown list or anything, just "default certificate (administrator's repository)".

I've searched the internet and this forum more particularly and ran into what seemed like similar issues, and found a possible solution:
http://forum.swsoft.com/showthread.php?t=35761&highlight=certificate
basically editing the http.include file in the /conf folder, replacing the SSLCertificateFile value with the correct certificate found in /usr/local/psa/var/certificates.
Well, I happen to have 4 files in this folder. I've tried all 4: out of the 4, 3 of them still appear as a default "plesk" certificate and thus are recognized as invalid by webbrowser; and the remaining one just won't work -- httpd refuses to restart (says "FAILED").

Does anyone have a clue?

Again, thanks for your time!

 

[GameCompany]

Another detail that might be important: the certificate we've purchased comes from GoDaddy
https://www.godaddy.com/gdshop/ssl/ssl.asp?ci=9039
we've purchased the "Standard SSL", Single domain. Does this help?

 

[faris]

One way to deal with this is to use the Server -> Certificate sercion rather than worrying about trying to deal with it at the domain level.

Copy the Private key from the certificate you created at the domain level.

Go to Server -> Certificates and add a new certificate

Copy the Private Key, the certificate you got from GoDaddy (standardd certificates are fine) and BOTH of the CA certificates (there are two -- they call it combined or something, so you end up with two CA certificates, one after the other, each with their own BEGIN/END.

Once the certificxate is in place, assign it as the default certificate for the IP addreess you will already have assigned to the domain (Server -> IP).

Then go to the domain, and select the certificate from the drop down.

Faris.

 

[GameCompany]

Well thanks for your reply!
It worked almost exactly as you said... except for one major problem.

Here's what I've done:
1) created the certificate in the Server Certificate (which is the "administrator's repository" I guess)
2) set my new certificate as default certificate for domains
3) went to the "IP" configuration page, and selected my new certificate in the drop down list
now, all my domains are using the new certificate.
However, the certificate is only valid for ONE of my domains.

You said this:

Then go to the domain, and select the certificate from the drop down.

When I go to the domain setup page, I still don't have a drop down list, I can't select the certificate for the domain. It has to use the default one apparently.
Like on this picture:
http://gbatemp.net/up/cert_002.jpg

I happen to have 3 domains that require different SSL certificates, hosted on the same server. I really need to be able to select different certificates for each domains...

 

[breun]

You need exclusive IP addresses for domains with SSL certificates.

 

[GameCompany]

Well, that's an important detail I didn't know. Thank you very much for the precision!

 

[breun]

Note that that is not a Plesk limitation, but just the way HTTPS works. So, always get a dedicated IP address for sites with SSL certificates.

 

[GameCompany]

Yeah, I understand that. I will be able to obtain over 8 additional IP addresses which I'm setting up now.
Thanks again for your help.

I've also found a way to manually configure the certificate file for a domain (apparently).
Once you add a certificate to Plesk, you can download a .PEM file using the download icon on the right of each item in the list of certificates.
Upload that .PEM file somewhere on your server, and then edit the http.include file in the /conf folder of your domain. Replace the SSLCertificateFile value by the path of the PEM file you just uploaded.
^ this worked for me.

 

[breun]

Editing httpd.include is *never* a good idea. Plesk rewrites this file at will. (See Including Directives into Web Server Configuration File if you need to add or override any settings in a domain's Apache configuration.)

Are the docs not working for you? Securing E-commerce Transactions with Secure Sockets Layer Encryption If so, use the 'Send feedback'-link to let Parallels know their docs are not working for you.

 

[GameCompany]

Note that that is not a Plesk limitation, but just the way HTTPS works. So, always get a dedicated IP address for sites with SSL certificates.

about this remark, if I understand correctly 1 certificate = 1 IP address.
But is it possible to purchase a special certificate that will cover multiple domains?
So that I only have to purchase 1 certificate that is valid for all the domains on my server?

Edit:
I think I've found the answer to my question: http://help.godaddy.com/article/3908?isc=psr1

Thanks everyone!

 

[ecja]

Please click one of the Quick Reply icons in the posts above to activate Quick Reply.

 

[whipworks]

Hi guys. I'm currently having the same issue with assigning SSL certs for one domain. I've renewed the domain. Have a static IP assign. But when I try to add it, the domain isn't available on the drop down menu for me to assign. It will usually have domains available for me to choose so I can assign it to the correct domain. But this one just says "NONE". Any reason why the domains doesn't show up on the drop down box? Thanks in advance