• The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Feature-Request: "SubjectAlternativeNames" in CSR (X509 V3)

cyberjunk

New Pleskian
Where:
Plesk UI -> "Add SSL Certificate"

What:
It is possible to provide "alternative" names in certificates and their CSRs (additional to the main FQDN which is read from the "Domain name" in the plesk UI).

It's NOT supported by all CA/any cheap certificate.

It's well described here:
http://apetec.com/support/GenerateSAN-CSR.htm

I would like the UI being improved to allow entering subect alternative values which then will be included in the CSR or selfsigned certificate.

Benefits:
(a) This could be useful for professional users with expansive wildcard certificates (*.company.com). It's common to integrate the rootdomain (company.com) as an alternative name in such. Otherwise using a *.company.com certificate on company.com usually gives issues.
(b) This can improve the quality of self-signed certificates. Of course they will still warn the users about being self-signed, but the additional warning about being not correct for the destination they entered (e.g. they opened company.com instead of www.company.com) would disappear.

PS: cPanel seems to support it ;-)
 
Last edited:
Back
Top