Problem with manually installation of SSL Certificate

[EugenioF]

Hi,
I've a problem to manually install on Plesk 10.4.4 a GeoTrust SSL/EV certificate.
How can install the certificate only with the vhost_conf.ssl?

I've create the file /var/www/vhosts/domain.tls/conf/vhost_conf.ssl

<Directory /var/www/vhosts/domain.tld/httpdocs>
<IfModule mod_ssl.c>
SSLCertificateFile /etc/ssl/certs/domain_tld_ee.crt
SSLCertificateKeyFile /etc/ssl/private/domain.tld.key
SSLCertificateChainFile /etc/ssl/certs/intermediate.crt
</IfModule>
</Directory>

NOTE: GeoTrust SSL/EV Require two ".crt" files: the certificate and a intermediate file

Then, I reconfigure the domain with command:

/opt/psa/admin/bin/httpdmng --reconfigure-domain domain.tld

An error occured:

PleskUtilException: '/opt/psa/admin/bin/apache-config' '-t' failed with code .

stdout:


stderr:
Syntax error on line 3 of /var/www/vhosts/domain.tld/conf/vhost_ssl.conf:
SSLCertificateFile not allowed here

file: /opt/psa/admin/plib/Service/Agent/Transport/Local/Exec.php
line: 71
code: 0
trace: #0 /opt/psa/admin/plib/Service/Agent/Transport/Local.php(58): Service_Agent_Transport_Local_Exec->process(4, Object(Service_Agent_Command_Exec), Object(Service_Agent_Log), Object(Service_Agent_Transport_LocalTransaction))
#1 /opt/psa/admin/plib/Service/Agent/Transport/Local.php(24): Service_Agent_Transport_Local->_command(4, Object(Service_Agent_Command_Exec), Object(Service_Agent_Transport_LocalTransaction), Object(Service_Agent_Log))
#2 /opt/psa/admin/plib/Service/Agent.php(133): Service_Agent_Transport_Local->process('8bdb2d72d7bef3b...', Array, Object(Service_Agent_Log))
#3 /opt/psa/admin/plib/Template/Writer/Apache.php(58): Service_Agent->commit()
#4 /opt/psa/admin/plib/Template/Configuration/Applier.php(196): Template_Writer_Apache->test()
#5 /opt/psa/admin/plib/Template/Configuration/Applier.php(117): Template_Configuration_Applier->_applyConfigurationsToServiceNode(1, Array)
#6 /opt/psa/admin/plib/WebServerManager/Adapter/Apache.php(125): Template_Configuration_Applier->applyConfiguration(true)
#7 /opt/psa/admin/plib/WebServerManager/Adapter/Apache.php(408): WebServerManager_Adapter_Apache->sync()
#8 /opt/psa/admin/plib/WebServerManager.php(287): WebServerManager_Adapter_Apache->reconfVhost('domain.tld', true)
#9 /opt/psa/admin/plib/api-common/Httpdmng.php(131): WebServerManager->reconfVhost('domain.tld')
#10 /opt/psa/admin/sbin/httpdmng(13): Httpdmng->__construct()
#11 {main}

2013-01-23T10:52:20+01:00 ERR (3): Apache config (13589347390.68801800) generation failed: Syntax error on line 3 of /var/www/vhosts/domain.tld/conf/vhost_ssl.conf:
SSLCertificateFile not allowed here

Syntax error on line 3 of /var/www/vhosts/domain.tld/conf/vhost_ssl.conf:
SSLCertificateFile not allowed here

[Exit 1]

I try to modify the vhost_conf.ssl, and move the certificates in other directories, but the problem persist.
Please, help me
Thanks in advance

 

[EugenioF]

anyone can help me?

 

[Faris Raouf]

You mention vhost_conf.ssl but I assume you mean vhost_ssl.conf ?

Can I ask why you want to do this manually? Why not use the Plesk GUI?

Ignoring that, take a look at the other contents of your /conf directory. In there you will find several .include files. Look for and view the most recent one.

Take a look at where the include line for vhost_ssl.conf is located. I'm doing this from memory, but as far as I remember it goes something like this:

<IfModule mod_ssl.c>

<VirtualHost 123.123.123.123:443>

Include "..........vhost_ssl.conf"

</VirtualHost>

</IfModule>

So this means you don't need to add another <IfModule mod_ssl.c> and so the solution might be as simple as removing that and the matching </IfModule> from your vhost_ssl.conf file.

However, I would have expected a different syntax error to be reported if what I'm suggesting is correct, so I may be totally off-track.

 

[EugenioF]

Hi,
thanks for your kindly reply.
The file is vhost_ssl.conf, sorry,

I check the last .include file of conf/
I find 3 Include "..........conf" commands, but not the include of vhost_ssl.conf !

In <VirtualHost 123.123.123.123:443> I find only the command:

Include ".........../conf/siteapp.d/*.conf"

In <VirtualHost 85.94.199.120:80> I find :

Include "............/conf/siteapp.d/*.conf"
Include ............./conf/vhost.conf*"

Why I don't have the Include ............./conf/vhost_ssl.conf*" on my virtualhost 443?
Maybe I must activate same option in plesk GUI to include vhost_ssl.conf?
Can you help me?
Thanks in advance

 

[Faris Raouf]

Just a guess, but with your vhost_ssl.conf in place in the conf directory, try:

/usr/local/psa/admin/bin/httpdmng --reconfigure-domain domainname.com

Also make sure ssl is enabled for that domain etc etc.