• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

where is ssl crt & key stored

Do you mean ssl certificate installed for domains?

/usr/local/psa/var/certificates/
 
Do you mean ssl certificate installed for domains?

/usr/local/psa/var/certificates/

It seems to be just a single file. how can i use this with a single file?


server {
listen xxx.xxx.xxx.xxx:443;
server_name www.example.net;

root /var/www/vhosts/www.example.net;

ssl on;
ssl_certificate /etc/pki/nginx/www.example.net.crt;
ssl_certificate_key /etc/pki/nginx/www.example.net.key;

ssl_protocols SSLv3 TLSv1;
ssl_ciphers ALL:!ADH:!EXPORT56:RC4+RSA:+HIGH:+MEDIUM:+LOW:+SSLv2:+EXP;
ssl_prefer_server_ciphers on;

location / {
proxy_pass http://127.0.0.1:8080;
proxy_set_header Host $host;
proxy_set_header X-Real-IP $remote_addr;
proxy_set_header X-Forwarded-For $proxy_add_x_forwarded_for;
proxy_set_header X-Forwarded-Proto https;
}
}
 
Hi Madness,

please have a look at the following article, which describes pretty well some basic knowledge about certificates:

http://www.thegeekstuff.com/2009/07/linux-apache-mod-ssl-generate-key-csr-crt-file/ ( external link, please inform me, if the link goes dead )

In addition, please don't edit a Plesk generated configuration file manually, if you would like to secure a website with your own certificate. Instead, please use the Plesk Control Panel.

( If you edit Plesk generated configuration files manually, please be aware that all your changes may be overwritten in case of updates/upgrades/patches, or webserver-configuration-rebulid-processes )
 
Last edited by a moderator:
Hi Madness,

please have a look at the following article, which describes pretty well some basic knowledge about certificates:

http://www.thegeekstuff.com/2009/07/linux-apache-mod-ssl-generate-key-csr-crt-file/ ( external link, please inform me, if the link goes dead )

In addition, please don't edit a Plesk generated configuration file manually, if you would like to secure a website with your own certificate. Instead, please use the Plesk Control Panel.

( If you edit Plesk generated configuration files manually, please be aware that all your changes may be overwritten in case of updates/upgrades/patches, or webserver-configuration-rebulid-processes )
I've already added a certificate to my website via the plesk panel.

I want to add proxy pass as the example above shows
 
Hi Madness,

same here... if you add manually modifications to your Plesk - generated configuration files, you might loose any modification on each update/upgrade/patch, or by webserver-configuration-rebulid-processes.


If you would like to modify your configuration files, there are two ways:

Either change your configuration files, by building custom templates..... please see:

... or add additional directives over the Plesk Control Panel:

Start > Abonnements > DOMAIN.COM > Websites & Domains > (SUBDOMAIN.)DOMAIN.COM > Webserver settings

If you need help, HOW TO BUILD custom configuration templates, please use the FORUM SEARCH, as there are quite a lot of threads with such a question. Just use the search words "custom templates", or use your own search words. ( Example: http://talk.plesk.com/threads/ssl-poodle-sslv3-bug.323338/#post-761018 )
If you still need help with this, please open a new thread, because this has got nothing to do with your initial question and might confuse other forum users, or users who search for solutions here in the forum.
 
Back
Top