Issue Cant install new license, SSL connection error

[Iametza Interaktiboa]

Hi all,
we have problems to install new license key. There is a problem with SSL certificate issued by keys server and domain name (SSL_ERROR_BAD_CERT_DOMAIN).

Server Info:
Centos 7
Plesk 12.0.18

When we try to install new Key, Plesk returns this error:

Error: Unable to connect to license server https://id-00.kaid.swsoft.com:5224/.
cURL error description: SSL connect error(35)

Same from command line:

# /usr/local/psa/bin/license -i XXXXXX-XXXXX-XXXXX-XXXXX
Unable to connect to license server https://id-00.kaid.swsoft.com:5224/.
cURL error description: SSL connect error(35)

and when we check with curl, we receive the error mentioned:

# curl -v -4 https://id-00.kaid.swsoft.com:5224/
* About to connect() to id-00.kaid.swsoft.com port 5224 (#0)
* Trying 195.214.233.81...
* Connected to id-00.kaid.swsoft.com (195.214.233.81) port 5224 (#0)
* Initializing NSS with certpath: sql:/etc/pki/nssdb
* CAfile: /etc/pki/tls/certs/ca-bundle.crt
CApath: none
* Server certificate:
* subject: CN=ka.plesk.com,OU=PositiveSSL,OU=Domain Control Validated
* start date: mar 28 00:00:00 2017 GMT
* expire date: mar 27 23:59:59 2020 GMT
* common name: ka.plesk.com
* issuer: CN=COMODO RSA Domain Validation Secure Server CA,O=COMODO CA Limited,L=Salford,ST=Greater Manchester,C=GB
* NSS error -12276 (SSL_ERROR_BAD_CERT_DOMAIN)
* Unable to communicate securely with peer: requested domain name does not match the server's certificate.
* Closing connection 0
curl: (51) Unable to communicate securely with peer: requested domain name does not match the server's certificate.

There is no firewall blocking connection like suggested on this thread: Cannot install Plesk license key: cURL cannot communicate with license server

There is any way to change license check URL or say to Plesk accept Insecure SSL connection?

Regards,

Manex

 

[ea2809]

Dear Manex,

I had the same problem, the only solution I have found is the following:

1. Connect through SSH
2. Go to /usr/bin
3. Move curl to curl2
4. Create a file "curl", for example "vi curl"
5. The content should be the following:

#!/bin/bash
curl2 --insecure $@

6. Give execution permission, "chmod +x curl"
7. Check you can do a normal curl.
8. Go and activate your key !!