• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

Issue Unable to access "Updates and Upgrades" page - No encryption on port 8447

Walter

Basic Pleskian
OS ‪Ubuntu 16.04.4 LTS‬
Product Plesk Onyx
Version 17.5.3 Update #45, last updated on April 12, 2018 06:25 A

When I click on "Updates and Upgrades" from the Plesk tools page, it comes up with a browser error:

Using a common SSL validation test:
The server does not have SSL/TLS encryption on port 8447. Data exchange with end-users can be intercepted.

I do have custom encryption settings for the nginx portion of my site:

/etc/nginx/conf.d/ssl.conf
Code:
ssl_ciphers ECDHE-RSA-AES256-GCM-SHA512:DHE-RSA-AES256-GCM-SHA512:ECDHE-RSA-AES256-GCM-SHA384:DHE-RSA-AES256-GCM-SHA384:ECDHE-RSA-AES256-SHA384:ECDHE-RSA-AES256-SHA:DHE-RSA-AES256-$
ssl_prefer_server_ciphers on;
ssl_protocols TLSv1.2;
ssl_ecdh_curve secp384r1;
ssl_session_timeout  10m;
ssl_session_cache shared:SSL:10m;
ssl_session_tickets off;
ssl_dhparam /opt/psa/etc/dhparams4096.pem;

Everything else works fine, I can access Plesk admin pages, all domains that I host and mail pages without issue.

I'm sure everyone says they didn't do anything but I have not made any modifications to my Plesk settings in many months. BUT I do regularly go into the updates and upgrades page to perform updates. It is my opinion that this inability to access the page is through an update to the Plesk software but I cannot place when that was other than within the last 2 months.
 
Back
Top