Website certificate reverting to default

[CharlieW]

I have a new 9.2.2 server running only a few web sites right now. One of these sites is running on a dedicated IP with its own certificate. Randomly, it seems, the cert for this site will revert to the "default certificate" built into plesk. There seems to be no rhyme or reason as to why this is happening or when. Has any one else ran into this? If so, could you shed some light on whats going on?

 

[Nataliya Zagr]

Hello,

Please, check the following article on the sertificate issue:

http://kb.odin.com/en/939

And also this one if the Parallels Plesk Panel (PP) is installed at the virtual container:

http://kb.odin.com/en/1090

Thank you

 

[surfichris]

We've got the same problem happening here, and I don't suspect support will be very helpful, but rather pass on the issue as being a "one off" or due to something with our setup. So far it's happened twice, and as you can imagine, our customers aren't particularly happy.

Any ideas?

 

[surfichris]

For now, I've come up with the following script to determine sites with invalid SSL certificates. I've got it running as an hourly cron:

#!/bin/sh
mysql -uadmin -p`cat /etc/psa/.psa.shadow` psa -e "SELECT d.name AS \`Domain\`, c.name AS \`Dedicated SSL Certificate\`, ic.name AS \`Actual Active SSL Certificate\` FROM hosting h JOIN ip_pool p ON (p.ip_address_id = h.ip_address_id AND p.id > 1) JOIN domains d ON (d.id=h.dom_id) JOIN Repository r ON (r.rep_id=d.cert_rep_id) JOIN certificates c ON (c.id=r.component_id) JOIN IP_Addresses i ON (i.id=h.ip_address_id) JOIN certificates ic ON (ic.id=i.ssl_certificate_id) WHERE p.type='exclusive' AND c.cert != '' AND i.ssl_certificate_id != component_id;"

Basically this will output any domains that have an SSL certificate in their repository, where that repository is marked as being active for the domain, but the SSL certificate for their IP address (exclusive IP) does not match the one that's in the repository. You'll get the domain, the SSL certificate that should be active, and the SSL certificate that is actually active.

 

[thewolf]

We hit the same issue with Plesk 9.2.3, there is a workaround posted here:
http://forum.parallels.com/showthread.php?t=95956

I hope SWsoft includes the fixes in an upcoming Plesk version asap!