• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Resolved Ignore Requests for non-configured domain/SSL combinations

rowingpeter_s

New Pleskian
Plesk Onyx on Linux hosting a mix of SSL and non-SSL sites.

Requests over https:// for sites where no SSL certificate is installed result in the plesk default webpage being returned as content for the request URL.

Naturally the default webpage SSL certificate is not valid for the request domain/URL and results in a browser warning that site is mis-configured.

My preference would be for any web requests over https:// that don't match an SSL configured domain to be ignored by the server [no response]. Is this possible?

I believe I could resolve this with a 2nd IP address and splitting SSL / Non-SSL sites. Would like to do it with a single IP if I can.
 
Last edited:
Apache always delivers the default page for domain request where it does not have a virtual host configuration for. This is expected behavior and cannot be changed. It is not Plesk related, but the standard behavior of Apache.
 
That makes sense and mirrors what I see. Thank you.

I can achieve the desired behaviour by mapping 2x IP addresses to the server and only opening port 443 in the firewall for one. SSL sites use one IP. Non-SSL the other.

I incidentally noticed that this isn't possible within a single subscription where all domains appear to need to use the same IP address.
 
Last edited:
Back
Top