https problem

[GianniB]

Most sites on my server don't use a ssl certificate. However, when entering https for one of these sites instead of the regular http, all sites on our server without their own show another site. Customers are angry because when someone enters https by accident, instead of the https being redirected to regular http, another site shows.

How can we fix this, and how is this possible that all of a sudden this problem occurs? In the past this worked fine.

 

[GianniB]

made a typo:

"all sites on our server without their own show another site" should have been:
"all sites on our server without an own SSL certificate show another site"

 

[GianniB]

maybe I should illustrate this with an example:

suppose I have the following sites on my server:

abc.com
def.com
xyz.com

abc.com has a SSL certificate, the other two don't.

https://abc.com will of course work fine.

But since def.com and xyz.com don't have their own SSL certificate, the https should either not work at all or redirect to the http of the site itself. Instead both https://def.dom and https://xyz.com redirect automatically to https://abc.com

Since abc.com is another customer, this shouldn't be like this.

This didn't happen in the past, so I'm curious what could have caused this. Anyone?

Also, if you know how to solve this, so that the https doesn't work for sites that don't have an SSL, we would like to hear how.

I'm going through my settings again, but they haven't been changed in a while, so I'm not sure what might have caused this.

 

[GianniB]

some additional info that might be useful in finding a solution:

Under System - Server - Shared SSL the Shared SSL is switched off. However, there is one domain listed there in the greyed-out drop-down list (the abc.com from my previous example). Somehow this domain got activated on the server as the shared ssl server-wide ssl certificate.

And even though the shared ssl is not active in the control panel, it is in fact active on the entire server. It seems to me that this is some kind of bug in Plesk.

I tried switching the shared ssl on, and unselect the selected domain, but there is no empty value there.

I'm wondering, how did that domain get there as the server wide ssl site? We didn't activate it as so.

And more importantly, how can we remove it as the default ssl domain?