• Debian 11 is approaching its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.80 will be the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

How to change the PSA SSL Certificate

dragnovich

Basic Pleskian
Had you tired to change the PSA certificate?? and found the it DOES NOT CHANGE, even doing everithing you found in the forums... I did not make it work.

So I do a little logic thinking, and fixed the problem, this is what I do.

Backup the files:
/usr/local/psa/admin/conf/rootchain.pem
/usr/local/psa/admin/conf/httpsd.pem

When you buy your certificate you will receive various CRT files, open those files in a separate window (process) ready to copy text.

Then edit the file (/usr/local/psa/admin/conf/httpsd.pem):
and paste the certificate RSA PRIVATE KEY first, then one empty line and then the Domain Certificate file). IE:
-----BEGIN RSA PRIVATE KEY-----
bla bla bla bla bla bla bla bla
-----END RSA PRIVATE KEY-----

-----BEGIN CERTIFICATE-----
bla bla bla bla bla bla bla bla
-----END CERTIFICATE-----

Then open the file (/usr/local/psa/admin/conf/rootchain.pem):
And paste here the CA root certificate you received with the certificate keys. Some root certificates requiere more that one certificate, in that case you will receive all (or directed to a download page). So paste ALL other certificates you received in this file separated by a blank space (Do not paste the, CSR request, the Key Certificate and the Site Certificate).

Stop & start the PSA process:
/etc/init.d/psa stop
/etc/init.d/psa start

Close all browser windows you have open, and access your Plesk Panel:
https://yourdomain:8443/

And voala!

If it does not work with your Plesk version, the solution was just researching the Apache Plesk configuration file (/usr/local/psa/admin/conf/httpsd.conf), where the psa tells the apache what certificate files to use. And find where apache reads the certificate, with the lines SSLCACertificateFile & SSLCertificateFile and edit those files.
 
Back
Top