Can't use ssl cert on subdomain

[dpicella]

I can't get my subdomain to use the security certificate I installed.

I am using plesk 8.1

On this domain I already have:
-dedicated IP
-SSL on domain.com
-1 subdomain
-2 certificates (domain.com and sub.domain.com)

How do I get the subdomain to "use" the right certificate?

https://domain.com works
https://sub.domain.com does not work (It uses the certificate for domain.com)

Problem with plesk:
1. There does not seem to be a way to assign an IP address to a subdomain or a cerficate to a subdomain.
2. But you CAN install multiple certificates in the domain repository
3. The subdomain setup does have a checkbox for SSL support but it does not allow you to select the certificate.

I have located the lines in /domain.com/conf/http.include that assign the certificate to the subdomain.

Actually, I tried changing those lines and all that seems to have happened is that I can't access my subdomain any more (I will get it back but that is what happened).

Any ideas? I would really appreciate it!

--David

 

[phatpixel]

It may be easier to set up the subdomain at the domain level in this instance. In this way you, can administer the subdomain with all the options of a full domain.

 

[dpicella]

Subdomain at the domain level

I was afraid of that...

I already installed a hefty bit (not that I cant move files and SQL but what a hassle). It just seems like there should be a way to configure this.

I'm having one of those moments where I would like to solve this problem if I can before I move the site to another domain account!

 

[DavidCollom]

I found a tutorial here:
http://www.1and1faq.com/forums/showthread.php?t=563&highlight=subdomain
That shows how to install an SSL Cert to a subdomain...
hope this helps.

 

[dpicella]

How to configure Plesk 8.1 to use a subdomain security cert

Finally, I managed to get my security certificate working on a subdomain using Plesk 8.1.

There are a number of different forum threads dealing with this topic, which you can review. However, these solutions are still incomplete for SUBDOMAIN configuration in the latest version of Plesk (8.1).

Similar Threads:
http://forum.swsoft.com/showthread.php?s=&threadid=35761
http://www.1and1faq.com/forums/showthread.php?t=563

Important Note: Apparently, SWSoft has abandoned subdomain security certificate support entirely! You will notice that when you configure your subdomain there are no configuration files. The following will give you an empty result:

# ls /var/www/vhosts/<yourdomainname>/subdomains/<yoursubdomainname>/conf

Subdomain certificate support in Plesk 8.1 is limited to assigning a single certificate to the domain. The same certificate is assigned to all subdomains by default and Plesk does not offer you a way to change that. So here is how it is done…

To perform the following operations, you need to be familiar with the Linux command line and the vi text editor. If you do not know how to use vi, then use the text editor that you are familiar with.

1. Set up your subdomain in Plesk (you won’t be able to specify the certificate to use)
2. Install a certificate for your subdomain in the domain repository.
3. Go to your apache configuration folder.

# cd /etc/httpd/conf.d

4. Copy your Plesk domain configuration file to this folder: I give it the filename z0-include.conf but you can use a different name (these files load in alphabetical order so pick a name to ensure that this file loads after ssl.conf but before zz010_psa_httpd.conf).

# cp /var/www/vhosts/<yourdomainname>/conf/httpd.include z0-include.conf

5. Get the names of your certificate files—there are 2 files NOT 1 but 2 ! These will be the files that were created on the day that you created your certificate for the subdomain (you will need these file names in step 9).

# ls -la /usr/local/psa/var/certificates

6. Edit z0-include.conf

# vi z0-include.conf

7. Find the section that describes your subdomain. Look for this:

<VirtualHost XX.XX.XX.XX:443>
ServerName <yoursubdomainname>:443

8. You are going to delete most of what is in this file. You only want to keep the <IfModule mod_ssl.c></IfModule> tags that define SSL for your subdomain. It will include <VirtualHost></VirtualHost> tags. Note: There are a number of <VirtualHost></VirtualHost> definitions, you only need the <IfModule mod_ssl.c></IfModule> set that contains the VirtualHost SSL definition for your subdomain. Your primary domain will be defined first, so it will be down around line 150 and contain about 50 lines. If you have more than 1 subdomain then it may be further down.

9. Now you need to change two lines to tell Apache about your new subdomain security certificate. Change the following 2 lines as follows: (Note: From step 5 the certificate is the larger file name and the CA certificate is the smaller file name).

SSLCertificateFile /usr/local/psa/var/certificates/<filename: subdomain certificate>
SSLCACertificateFile /usr/local/psa/var/certificates/< filename: subdomain CA certificate >

10. Save the file.

11. Restart Apache.

# service httpd restart

12. You are done!

 

[dpicella]

Plesk Subdomain Configuration

P.S. to the above post... Don't forget to get a wildcard certificate for your subdomain. This will save you a lot of money of you need more secure subdomains later!