• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

[Solved] No SSL-Contection to a Website posible

CKMartens

New Pleskian
First of all let me say sorry, cause my english isn't good enough as it should be after 9 years lerning english in school.

I've had a problem to get a connection to my websites via https.

My Plesk is version 12.0.18 an it runs on ubuntu 14.04 LTS.

I have installed the certificate in that way: https://www.namecheap.com/support/knowledgebase/article.aspx/9448/0/plesk-12
The SSL in that repository is activated in the hosting settings. I've activated und deactivated them a several times.
The nginx.conf and the httpd.conf seems to be all fine. SSL Engine is on an certificate statements links to the certificates in /opt/psa/var/certificates/

The access_ssl_log an proxy_access_ssl_log had no entries, but /var/log/nginx/error.log said:
2015/05/14 13:29:08 [error] 981#0: *12788 no "ssl_certificate" is defined in server listening on SSL port while SSL handshaking, client: x.x.x.x, serv$

ps -aux | grep php-fpm gives me:
root 1507 0.0 0.1 344768 16816 ? Ss Mai12 0:05 php-fpm: master process (/etc/php5/fpm/php-fpm.conf)
www-data 1513 0.0 0.0 344768 5544 ? S Mai12 0:00 php-fpm: pool www
www-data 1514 0.0 0.0 344768 5544 ? S Mai12 0:00 php-fpm: pool www
root 2422 0.0 0.0 15816 920 pts/8 S+ 13:31 0:00 grep --color=auto php-fpm

netstat -ntpl |grep apache2 gives
tcp6 0 0 :::7080 :::* LISTEN 915/apache2
tcp6 0 0 :::7081 :::* LISTEN 915/apache2

and

netstat -ntpl |grep nginx says
tcp 0 0 81.169.240.56:443 0.0.0.0:* LISTEN 981/nginx: worker p
tcp 0 0 81.169.240.56:80 0.0.0.0:* LISTEN 981/nginx: worker p

Login to Plesk with Port 8433 ist ok.

In the console the openssl s_client -connect martenscraft.de:443 give me
CONNECTED(00000003)
139928492619424:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:177:
---
no peer certificate available
---
No client certificate CA names sent
---
SSL handshake has read 0 bytes and written 305 bytes
---
New, (NONE), Cipher is (NONE)
Secure Renegotiation IS NOT supported
Compression: NONE
Expansion: NONE
---

What can I do to fix the Problem?

Regards
Carsten
 
Hi CKMartens,

there are no problems, using SSL for "https://martenscraft.de/" ( please check verification at: "https://www.ssllabs.com/ssltest/analyze.html?d=martenscraft.de" ), but your mixed content on your site...

For example:
<li class="menu-item-64"><a title="Übersichtkarte" target="_blank" href="http://play.martenscraft.de:8186">Übersichtkarte</a>

or:
<p>Wir sind die Familie Martens und spielen gerne mit Freunden und Bekannten das Open-World-Game <a href="https://minecraft.net/" target="_blank">Minecraft</a>.&nbsp;</p><p><img width="225" height="176" alt="Minecraft" class="mc-lightbox" src="http://martenscraft.de/wp-content/uploads/2015/05/minecraft_arches_by_damocles_designs-d3hi3ws1.png" style="float: left;">Und weil das “normale” Zocken keinen richtigen Spaß mehr bringt, haben
...

... result in failures/warnings. Please check your content for "http://..." - links and change it to "https://...".
 
Back
Top