Issue pki-validation nginx and sectigo issue

[psupena]

Hello! Hopefully someone can give me some insights into this.

So basically before, we could use file based domain control verification by just uploading txt files from SSL providers to the httpdocs/.well-known/pki-validation/ folder of sites.

However recently, (possibly after an update), ALL files under httpdocs/.well-known/pki-validation/ of ANY domain either gets redirected or 404s.

After some investigation we think it might be the vhost configuration added by the Sectigo extension

location ^~ /.well-known/pki-validation/ {
            root /var/www/vhosts/default/htdocs;             

            types { }
            default_type text/plain;

            satisfy any;
            auth_basic off;
            allow all;

            location ~ ^/\.well-known/pki-validation.*/\. {
                    deny all;
            }
    }
    #extension sectigo end **

The trouble is, not everyone can really upload to /var/www/vhosts/default/htdocs via the normal plesk GUI. You need some command line experience.

So my question is.. Is it possible to override this under the additional nginx directives? I get a "duplicate location" error if I try to alter some of these rules, or they just don't work really.

Or does this mean we are stuck getting ssls only from the plesk interface, or via CNAME verification (which we don't have access in some cases).


Our goal basically is to be able to once again upload those DCV files on httpdocs/.well-known/pki-validation/ without having to resort to using the command line to get them to /var/www/vhosts/default/htdocs .

Any help would be greatly appreciated! Thanks!

 

[raytracy]

I faced to same problem here.

We need upload authenticate file from third party SSL issuer, and use the /.well-known/pki-validation/ path as authentication. But this path has been hijacked by Sectigo extension...

Hope some one can point us a solution.

 

[jmcouillard]

Please see my answer here : Plesk Forum

Hope this helps.