Plesk 11.5 and certificates bugs and issues with trust on mobile devices

[javismiles]

plesk 11.5 certificates on domains

Hi
I have plesk 11.5, latest updates, centos 6 linux,

I havent been able to attach a certificate to a domain because when accessing from mobile phones the default plesk server certificate keeps being shown instead,
also in plesk 11.5 the option to attach a specific IP to a domain is not working

so i had to set certificate to server, then attach certificate to IP

If i set certificate to domain, and i then try to assign it to dedicated IP different from server IP i cant because in the IP settings of server, in certificate list the domain certificates dont appear!!!
so that forced me to create certificate in server not in domain, and then i could attach it to IP and then it works

until i had to create a subdomain of that domain, with a different certificate, now of course its big mess, as mobile phones when going to secure.domain.com subdomain get confused again probably
because the whole IP of domain is sending the other certificate instead of the certificate i created for the subdomain

help please! how can i assign correctly certificates to a domain and then link them to a dedicated new IP address that is not the server IP,
i cant do that because the domain certificates will not show up on the server ip addresses area

thank you

 

[javismiles]

Hi
i have
a linux centos 6 server
with PLESK 11.5 installed (...)

i installed a certificate on a domain.com.
The certificate was not being trusted by mobile devices like android nexus, because the server was sending its default plesk certificate instead of the domain's one
To solve this, because of Plesk issues, i couldnt attach certificate to domain,
i had to attach it to server, then create a dedicated IP, then attached the server certificate to that IP and then attach IP to domain,
well, and that way it worked.

Now i had to create a subdomain: secure.domain.com
and create a new certificate for this subdomain.
I then saw i had the same problem, certificate was trusted on desktop but not on mobile like android mobile
So i tried to do same solution, i put certificate on server not domain in plesk, then i attached that certificate to IP of subdomain, replacing the previous one (so that ip has a single certificate, the subdomain one, because in the end i only really need the subdomain to have https)

after doing that, if i go to
https://www.ssllabs.com/ssltest/analyze.html
or to
http://www.whynopadlock.com/
or to
https://www.ssllabs.com/ssltest/analyze.html

i get no errors, all correct, all fine, no errors

but i keep getting Not Trusted on Android mobile nexus!!!
after deleting cache and deleting all,
keeps giving no trusted, insane

how can i debug, troubleshoot this?

if i go to my server and i look in error logs i see no errors related,
unless im looking in wrong place

what is the correct place to see SSL errors on centos 6 with plesk 11.5?

can you help me fix this problem?

thank you

 

[Shanats]

Hi javismiles, i don't think this is a bug, plesk generate a self signed certificate by default server wide. when you want to add a certificate to a domain, you will need to give that domain a dedicated ip address and add the certificate, this change will take some time to propagate and results may not show up instantly across the web, it may show up some place before the other.


See
http://forum.parallels.com/showthre...rect-single-domain-SSL-installation-procedure

and

See
http://forum.parallels.com/showthread.php?299866-I-install-a-SSL-certificate-but-it-does-not-work

 

[Shanats]

This might help.

http://forum.parallels.com/showthre...rect-single-domain-SSL-installation-procedure