Panel redirect after 10.3 upgrade causing SSL warning

[theywill]

Hi there,

--------------------------------------------------------------
PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE

CentOS 5.6, latest updates, Plesk 10.3

PROBLEM DESCRIPTION AND STEPS TO REPRODUCE

After the upgrade, when I load the control panel URL (https://www.domainname.com:8443/), the browser is redirected to the hostname (https://hostname.domainname.net:8443/), before being redirected back to the original URL. This is causing an SSL warning, because the certificate does not belong to the hostname.

This is true, even if I use the final URL, https://www.domainname.com:8443/sso/ui

Previously, this did not occur, and it's obviously an issue because the panel no longer appears secure to end users.

ACTUAL RESULT

Redirection to host name, before redirecting back to the original URL.

EXPECTED RESULT

Loading of control panel with no redirection to hostname.

ANY ADDITIONAL INFORMATION

Change occurred after 10.2 to 10.3 upgrade.

--------------------------------------------------------------

Thanks for any ideas you have to resolve this.

James

 

[IgorG]

Thank you. I have forwarded it to developers. Let's wait their answer.

 

[IgorG]

Check the database.

SELECT * FROM misc WHERE param IN ('sso_relay', 'sso_server', 'sso_server_user_url');

Replace hostname.domainname.net with www.domainname.com in these of the three fields where required

UPDATE misc SET val = 'https://www.domainname.com:8443' WHERE param = 'sso_server_user_url;

 

[theywill]

Thanks for your help. Here's what I did.

# 1. shows us the db data for these parameters
/usr/bin/mysql -u admin -p`cat /etc/psa/.psa.shadow` --skip-column-names -e "SELECT * FROM misc WHERE param IN ('sso_relay', 'sso_server', 'sso_server_user_url');" psa

# 2. updates the db for these parameters - domain xxxxxx out
/usr/bin/mysql -u admin -p`cat /etc/psa/.psa.shadow` --skip-column-names -e "UPDATE misc SET val = 'https://www.xxxxxxxxxxxx.com:8443' WHERE param IN ('sso_relay', 'sso_server', 'sso_server_user_url');" psa

# 3. re-run the first command to see the changes.

When I re-ran the first query, I observed the changes were successful. However, I still see the redirect. To be sure, I tested the admin panel in four different browsers.

Is there another command that must be run to update PSA?

Thank you,
James

 

[theywill]

OK. Actually this works and doesn't work.

If you hit the control panel URL with https, it doesn't redirect through the hostname, and, thereby, there is no warning message.
https://www.domain.com:8443/

If the end user just uses the domain name, it still redirects through the hostname.
www.domain.com:8443

Regards,
James

 

[theywill]

Is there a solution that will fix this problem on log-out too? When logging-out, the browser is redirected to the machine name too.