Applicable to:
- Plesk
Question
How to enable/disable SNI support on the Plesk server?
Answer
By default, on clean Plesk installations (Linux and Windows) the support for SNI is turned on.
In case of Plesk upgrade on Windows from version 11.0 or earlier, the support for SNI is switched off.
It can be turned on in Tools & Settings > Server Settings.
To enable SNI support on Plesk for Linux:
-
Connect to the server using SSH.
-
Change
SNI_SUPPORT
value to true:# vi /etc/psa/psa.conf
SNI_SUPPORT trueNote: to disable change value to false.
-
Restart
psa
service:# service psa restart
The SSL support with SNI is possible only if the following requirements are met:
- The operating system of Plesk server supports SNI.
- Linux systems.
- Windows Server 2012 and above.
- Users' browsers support SNI.
Note: most modern web browsers, starting from IE 7, Firefox 2.0, Opera 8.0, and Chrome 1.0, support SNI, unless they are run on Windows XP. To learn more about SNI and the client software that supports it, refer to http://en.wikipedia.org/wiki/Server_Name_Indication
If SNI is not supported and Plesk administrator assigned an SSL certificate to a website hosted on a shared IP address, Plesk will associate that certificate with all other websites hosted on this IP address. In the same case, hosting customers with shared IP addresses will not be able to assign SSL certificates to their sites: the Websites & Domains > example.com > Secure Your Sites button will be hidden in their Control Panel.
For instructions on assigning SSL certificates to websites, refer to Plesk Administrator's Guide.
Comments
5 comments
On a fresh install of Plesk Obsidian, there is no SNI_SUPPORT line in /etc/psa/psa.conf
Also the link: How to check if Apache with SNI support is installed
is invalid
Hello @Josh,
That's expected that there's no such line on a new installation of the modern Plesk version.
This line is required to be added manually only in case the server was upgraded from version 11.0 and earlier.
Thank you for noticing the broken link, I have removed it from the article as the information from this article is already present in this one.
Hello,
SNI option is not showing in Plesk panel on a particular VM of ours.
Context:
- OS : CentOS 6
- Was updated to Obsidian while having Qmail as an SMTP server
- Postfix was installed as a replacement for Qmail
- SNI_SUPPORT true is defined in psa.conf
- Server was rebooted
- Still no SNI showing up
Anything else to check in order to get the option? Or maybe isn't it available for CentOS 6 within Plesk yet?
Thank you
@Robin Labadie as far as I understood you mean SNI for mail, CentOS6 is not supported in this case
https://support.plesk.com/hc/en-us/articles/115001446174-How-to-secure-a-Plesk-mail-server-with-different-SSL-certificates-SNI-support-
Hello.
Thanks Lev Iurev , in the meantime, I figured out this is due to Postfix's version in CentOS 6 which is not compatible with SNI. Too bad. :(
Please sign in to leave a comment.