Installing 2 SSL's into domains

[kreitje]

Hello all.

The past few days have been extremely frustrating to say the least.

What I am trying to do:
Install 2 SSL certificates to 2 domains.
SSL 1: secure.domain1.com
SSL 2: secure.domain2.com

What I have done:
I got the first one installed. I did it by the using the Certificates link in the Server page. However, I then tried to install the second one and was unable to get it to work with the correct domain. I even got the plesk control panel to use the second SSL but couldn't get secure.domain2.com to use it. I gave each of the 2 domains their own dedicated ip address.
After I could not get this to work, I read through the instructions, removed the installed SSL to start over. I have now installed it under the domain, and did everything in the instructions. I now, cannot get it to work. When going to the secure page it just gives me the default certificate that plesk uses (the self signed one). So further reading said to remove/comment out, a section in the apache ssl conf, then stop apache and then start it.. Tried it with no success.

So currently:
I have 1 of 2 certificates installed and not working. Is there some magic I can do to get the certificate working being installed at the domain level (as it can no longer be re-keyed to a new CSR).

Thanks,
Jeff

 

[jwdick]

I don't know about the "certificate" that you purchased, but I know when I purchased Starfield Certificates, I had to download a special cer called sf_bundle.cer to make the certificate work with Plesk. You may have to call the Certificate Issuing Authority's tech support line to find out if this is the case with yours.

If you have closed your control panel and therefore, lost your original Certificate Request, I do not know how you would correct the problem without getting it re-keyed. But I would not purchase another without clear instructions from the issuing authority about how to install with Plesk..

 

[kreitje]

The SSL's I am attempting to install are from Starfield. I have the sf_bundle.crt, is the .cer a different file?

Thanks,
Jeff

 

[jwdick]

IF you go here: https://certificates.starfieldtech.com/Repository.go to download the SF_bundle.crt for Cpanel/Plesk, when it asks for a download location, the file name is saved as sf_bundle.cer

If you install the sf_bundle.crt that came in the zipped file, that is the wrong one.

Once you have the right "cer", then:
Only install the certificate with the domain name then
install the sf_bundle.cer as the CA certificate

In my opinion, Plesk and Starfield instructions are extremely poor in reference to this.

 

[kreitje]

Done, but it still didn't do the trick. Its still using the "default" certificate that the plesk control panel uses.

 

[jwdick]

Did you restart apache?

/etc/rc.d/init.d/httpd stop
/etc/rc.d/init.d/httpd start


Doing just a "restart" does not work

 

[kreitje]

Yep.

Clicked Stop. Then Start.

 

[jwdick]

In the control panel under <DOMAIN><SETUP>"Certificate", is the new certificate listed?

 

[kreitje]

Yes.

Certificate Domain1_CertName (Repository of domain domain1.com)

 

[jwdick]

Then I am out of ideas. Installation and setup sounds correct. The certificate was selected in <DOMAIN><SETUP> before restarting the Web Service. It was installed correctly or it would not have shown in the drop down list in Setup. All sounds correct. I have always restarted by using SSH to terminal into the server, but is should have worked from the Control Panel Service Management option also. I'll keep poking around to see if I can find something else. In the meantime, maybe someone else has some information to contribute?

 

[kreitje]

Thank you very much. This is the most help I have gotten from anyone lately.

I appreciate it a lot.
Jeff

 

[jwdick]

It doesn't appear that I was much help. I have installed about 8 of these blasted certificates and they have never been easy.

I was looking through my notes and they say to "terminal into the box then stop/start ( not restart ) httpd. Do not use the Control Panel Web Service Manager." I do not know why I spelled that out like I did, but if you get a chance to terminal in for some other reason, try to do that also just to be sure.

 

[kreitje]

Didn't work.