Clarification for correct single domain SSL installation procedure

[Shanats]

Plesk 11.5 on centos 6

Should the certificate created at admin level be showimg in the domain panel without having to add the certificate at domain level?

Adding the certificate gives a match warning message, after researching that warning, it seem it can be ignore safely, but why is the warning generated to begin with?

Further check on the domain name via geotrust ssl tool box result shows error that the domain / ip is still using plesk self signed default certificate, even after restarting apache. Why is this, and how can this be resolve?




It is my understanding that the procedure is as follow;

1) Assign a dedicated ip to the domain

2) From tools and settings on the left under server management >> SSL certificate under secuirty category >> add SSL certificate, fill in the correct info, request csr if need to in order to get the certificate from provider.

3) After obtaining certificate from provider along with Ca certificate, return to the SSL certificate repository and add to the certificate created respectively.

4) From tools and settings >> ip addresses, select the dedicated ip address assigned and set ssl certificate to the one created respectively.


Now adding the certificate to the domain itself, open up the domain in the domain control panel and secure site adding the same certificate except it will have to be a different name from the one created at the panel admin level., after that is done then edit hostimg settings and enabling ssl and selected the ssl created respectively.

 

[KristianM]

Hi,

steps 3 and 4 should not be necessary as you should be setting up the SSL certificate at customer level as the IP is dedicated anyway.

Other than that, this should be the way to go

Regards,
Kristian

 

[Shanats]

Hi KristianM

Thanks for your reply, that's what i thought initially, why should it need to be setup at the ip level since the ip is dedicated and its setup at the domain level. After today i notice now that Geotrust ssl tool box is not reporting "Certificate installation successfully checked" after it was reporting fail yesterday and geocert and many other checker was reporting successfully installed.

My guess is that the error fail install on geotrust ssl tool box was propagation related. Funny enough, after noticing the fail on geotrust ssl tool box and successful result on other checkers, i was already convince its propagation related, i contacted geotrust who insisted that it wasn't set up properly, which led to me making this thread.

Well at least it will be here for anyone who run into this situation and seeking clarification.

Hi,

steps 3 and 4 should not be necessary as you should be setting up the SSL certificate at customer level as the IP is dedicated anyway.

Other than that, this should be the way to go

Regards,
Kristian