Articles in this section

See more

How to enable/disable SNI support on the Plesk server

Avatar
Julian Bonpland Mignaquy
Updated
Follow
Plesk for Windows Plesk for Linux kb: bug ABT: Group B

Applicable to:

  • Plesk for Linux
  • Plesk for Windows

How to enable/disable SNI support on the Plesk server?

Answer

By default, on clean Plesk installations (Linux and Windows) the support for SNI is turned on.

In case of Plesk upgrade on Windows from version 11.0 or earlier, the support for SNI is switched off and it cannot be turned on in Tools & Settings > Server Settings as in the past due to User Story https://jira.plesk.ru/browse/PPP-28338

To enable SNI support on Plesk for Linux:

  1. Connect to the server using SSH.

  2. Change SNI_SUPPORT value to true:

    # vi /etc/psa/psa.conf
    SNI_SUPPORT true

    Note: to disable change value to false.

  3. Restart psa service:

    # service psa restart

The SSL support with SNI is possible only if the following requirements are met:

  1. The operating system of Plesk server supports SNI.

  2. Users' browsers support SNI.

    Note: most modern web browsers, starting from IE 7, Firefox 2.0, Opera 8.0, and Chrome 1.0, support SNI, unless they are run on Windows XP. To learn more about SNI and the client software that supports it, refer to http://en.wikipedia.org/wiki/Server_Name_Indication

If SNI is not supported and Plesk administrator assigned an SSL certificate to a website hosted on a shared IP address, Plesk will associate that certificate with all other websites hosted on this IP address. In the same case, hosting customers with shared IP addresses will not be able to assign SSL certificates to their sites: the Websites & Domains > example.com > Secure Your Sites button will be hidden in their Control Panel.

For instructions on assigning SSL certificates to websites, refer to Plesk Administrator's Guide.

Comments

5 comments

Sort by Date Votes
  • Avatar
    John Bertin (Edited )

    On a fresh install of Plesk Obsidian, there is no SNI_SUPPORT line in /etc/psa/psa.conf

     

    Also the link: How to check if Apache with SNI support is installed

    is invalid 

    0
    Comment actions Permalink
  • Avatar
    Ivan Postnikov

    Hello @Josh,

    That's expected that there's no such line on a new installation of the modern Plesk version.

    This line is required to be added manually only in case the server was upgraded from version 11.0 and earlier.

     

    Thank you for noticing the broken link, I have removed it from the article as the information from this article is already present in this one.

    0
    Comment actions Permalink
  • Avatar
    Robin Labadie

    Hello,

    SNI option is not showing in Plesk panel on a particular VM of ours.

    Context:
    - OS : CentOS 6
    - Was updated to Obsidian while having Qmail as an SMTP server
    - Postfix was installed as a replacement for Qmail
    - SNI_SUPPORT true is defined in psa.conf
    - Server was rebooted
    - Still no SNI showing up

    Anything else to check in order to get the option? Or maybe isn't it available for CentOS 6 within Plesk yet?

    Thank you

    0
    Comment actions Permalink
  • Avatar
    Lev Iurev

    @Robin Labadie as far as I understood you mean SNI for mail, CentOS6 is not supported in this case

    https://support.plesk.com/hc/en-us/articles/115001446174-How-to-secure-a-Plesk-mail-server-with-different-SSL-certificates-SNI-support-

    0
    Comment actions Permalink
  • Avatar
    Robin Labadie

    Hello.

    Thanks Lev Iurev , in the meantime, I figured out this is due to Postfix's version in CentOS 6 which is not compatible with SNI. Too bad. :(

    0
    Comment actions Permalink

Please sign in to leave a comment.

Have more questions? Submit a request

Related articles