How to install an SSL certificate for a domain in Plesk (Let's Encrypt / other certificate authorities)

Follow

Comments

25 comments

  • Avatar
    Cesare

    @Robert Asilbekov

    I solved by restarting the server.

    0
    Comment actions Permalink
  • Avatar
    Ivan Postnikov

    Hello @Tanja, 

    The intermediate certificate is a separate type of certificates, which is used together with a server certificate. More information, for example, may be found here.

    For obtaining required info regarding your certificate, please, contact corresponding certificate authority.

    0
    Comment actions Permalink
  • Avatar
    Alisa Kasyanova

    @Priyank S
    The Domains > example.com > SSL Certificates option is missing under the domain, am I right? If so, please make sure that SNI is enabled on the server: https://support.plesk.com/hc/en-us/articles/213387749-Unable-to-install-a-certificate-for-a-domain-SSL-TLS-Certificates-option-is-missing

    0
    Comment actions Permalink
  • Avatar
    Andres Santander

    How do you close and open the website, after installing the certificate.

    0
    Comment actions Permalink
  • Avatar
    Ivan Postnikov

    @Priyank,

    > But i am not getting the option to upload the crt file.

    This should be done at 

    Domains > example.com > SSL Certificates:

    After uploading, the certificate will be available for selection at Domains > example.com > Hosting Settings

    0
    Comment actions Permalink
  • Avatar
    Ivan Postnikov

    Hello @Andres,

    > How do you close and open the website, after installing the certificate.

    If redirection from HTTPS to HTTPS is enabled, to open the website you just need to type its domain name in the browser address bar. If such redirection in disabled, you will need to type "https://" before the domain name.

    Could you explain what do you mean here by closing the website, do you mean closing it in a browser or something else?  

     

     

    0
    Comment actions Permalink
  • Avatar
    Robert Asilbekov

    @Cesare

    There is a name resolution issue on your side. - "Could not resolve host: acme-v01.api.letsencrypt.org; Name or service not known" 
    Make sure that the "acme-v01.api.letsencrypt.org" could be resolved from your server.

    0
    Comment actions Permalink
  • Avatar
    Alexandr Redikultsev

    Hi @Webmaster!

    Try uploading the cert via Domains > example.com > SSL/TLS certificates. After that, it should be available for the domain.

    0
    Comment actions Permalink
  • Avatar
    Alexandr Redikultsev (Edited )

    Hello, @Scott S.

    As Let's Encrypt require validation before certificate will be provided, and validation is performed by creating a .well-known folder in the document root, so domain should have a hosting to perform a validation. It is possible, however, try to trick the process via CLI, by specifying another document root for the validation:

    # plesk bin extension --exec letsencrypt cli.php --help | grep webroot-path
    --webroot-path|-w <string> Obtain certs by placing files in a webroot directory.

    Check this one out for additional info: How to secure Plesk and mail server with Let's Encrypt certificate via CLI?

    0
    Comment actions Permalink
  • Avatar
    Andres Santander

    Dear Ivan. I installed an SSL certificate, but in the browser bar it says is "not safe". I checked the certificated and is correctly installed. Reading this topic, in the beginning it says "Note: After the certificate installation, the website must be closed and opened again, otherwise if only the page is reloaded, the browser will continue showing certificate error." That's why I asked about closing the website.

    0
    Comment actions Permalink
  • Avatar
    Priyank S (Edited )

    hey, in my plesk i cannot see options for encrypt or secure your site, what shall i do?

    I have ssl certificate ready with me.

    0
    Comment actions Permalink
  • Avatar
    Taras Ermoshin

    Hello @Andres Santander!

    >Reading this topic, in the beginning it says "Note: After the certificate installation, the website must be closed and opened again, otherwise if only the page is reloaded, the browser will continue showing certificate error."

    This means the same that Ivan said - close browser tab/window in which a website opened, and then open it in a new browser tab/window.

    >I installed an SSL certificate, but in the browser bar it says is "not safe".

    Usually, this means that either old certificate is cached by the browser, or there are some elements on the website (pictures, CSS, JS etc.) which are downloaded over HTTP, not HTTPS (see the article for more information).

    To check if it's a cache issue or not, open the website in the incognito browser window.

    If the issue still persists, consider submitting a support request.

    0
    Comment actions Permalink
  • Avatar
    Anna Morozyuk

    Hello @TRILOS!

    To secure domain in Plesk panel it should be resolved to the server IP address.


    As for the SNI feature not working correctly on your server, please check these articles:
    https://support.plesk.com/hc/en-us/articles/213944545-How-to-activate-the-SNI-support-on-a-Plesk-server-
    https://support.plesk.com/hc/en-us/articles/115001446174-How-to-secure-a-Plesk-mail-server-with-different-SSL-certificates-SNI-support-

    If none of these solutions will work for you, please contact support using this article: https://support.plesk.com/hc/en-us/articles/213608509-How-to-submit-a-request-to-Plesk-support-

    We are encouraged to investigate SNI issues, thus, every issue is valuable! 

    0
    Comment actions Permalink
  • Avatar
    Cesare

    I can not install Let's Encrypt on my hosting at a virtual server. I receive this message:
    Error: Could not issue to Let's Encrypt SSL / TLS certificate for [...]

    Let's connect to the Let's Encrypt server https://acme-v01.api.letsencrypt.org.
    Please try again later or report the issue to support.
    Details
    Could not obtain directory: cURL error 6: Could not resolve host: acme-v01.api.letsencrypt.org; Name or service not known (see http://curl.haxx.se/libcurl/c/libcurl-errors.html)

    0
    Comment actions Permalink
  • Avatar
    Webmaster

    Hi,I just installed a custom SSL certificate using the Plesk administrative panel.
    Also I set the right certificate in the IP setting and also restarted Apache
    But when I look at the domain panel "Hosting setting" I see only the default certificate available.

    Any tip

    0
    Comment actions Permalink
  • Avatar
    Ivan Postnikov

    Hello @Tanja, Could you, please, clarify the question? As I can see from the reply, the issue is already resolved.

    Could you please give more details about the scenario you are trying to apply? 

    This will allow to give you more precise answer.

    0
    Comment actions Permalink
  • Avatar
    Ivan Postnikov

    Hello @Priyank,

    What version of Plesk is used? Do you have access to Plesk as administrator?

    Do you have SSL support activated at Domains > example.com > Hosting Settings?

    0
    Comment actions Permalink
  • Avatar
    Scott S.

    How do you install a Let's Encrypt certificate on a domain that is only hosting emails (no web hosting)? There is an option to select a certificate on the Mail Settings tab, but I don't see any place to actually setup the certificate.

    0
    Comment actions Permalink
  • Avatar
    TRILOS

    To secure mail exchange with mail.customerdomain.tld on a mail-only server with Plesk Obsidian, how to get Let´s Encrypt Certificate, when www.customerdomain.tld points to on another server? It seems to be impossible and the shiny new SNI feature of Obsidian simply does not work...

    0
    Comment actions Permalink
  • Avatar
    Priyank S

    It should have but it isn't available.

    I am stucked here since yesterday.

    Does it take time to process because I have uploaded it yesterday ?

    0
    Comment actions Permalink
  • Avatar
    Priyank S

    i am using plesk 12.5.30 version.

    In hosting setting it is asking to install the ssl certificate first, I have already uploaded the file in webroot directory as mentioned by the ssl team.

    But i am not getting the option to upload the crt file.

    Thanks for the prompt reply.

    0
    Comment actions Permalink
  • Avatar
    Ivan Postnikov

    Hello @Tanja, thank you for sharing the additional details.

    > i would actually do that myself if you want (as long as i still know how) but i dont think i can? 

    Feel free to share detailed steps which helped you to achieve the goal.

    Based on this information, this article will be updated or the new one will be created. 

    0
    Comment actions Permalink
  • Avatar
    Tanja Kluth (Edited )

    thank you, but i already have everything, i only need to add it into plesk somehow.

    Do i just overwrite the certificate i already have there? Or do i add it under the old certificate? 

    Edit: i solved my problem now, it is really related to how to add the intermediate certificate when you already have a certificate

    please! I need an additional walkthrough for the case 

     

    0
    Comment actions Permalink
  • Avatar
    Tanja Kluth

    Hello Ivan,

    the problem is the change from installed SSL certificate which is accepted from almost every browser as secure except safari (and some other mobile exceptions) to the extended "intermediate" certificate.

    So i had my URL running for a few month under the normal Commodo SSL certificate but then started to get complains from customers that some browsers still marked my url as unsecure. i contacted commodo about it and they gave me an intermediate certificate with a vage instruction to add it under the normal certificate in plesk..

    i had 1 week struggle till i figured out they ment that literal AND that i had to redo it underplesk with the normal certificate top and the intermediate bottom. 

    i work for a small company and i m the technical support for everything here, a jack of all trades is a master of non so i (and probally other people) need that "how-to" in case i need to do that again in a few month and i forgot how to do it (or someone else like me totally new to that problem needs as well) so my request is if you can make a more detailled walk-though.

    i would actually do that myself if you want (as long as i still know how) but i dont think i can? 

    0
    Comment actions Permalink
  • Avatar
    Tanja Kluth

    How do I upgrade a SSL Certificate to Intermediate or Chain? 

    I have a valid certificate, when i try to update it to intermediate it says incompatible key and certificate

    -1
    Comment actions Permalink

Please sign in to leave a comment.

Have more questions? Submit a request