Let the ASL web interface use Plesk's SSL cert if available

breun · **Posted:** Thu Aug 27, 2009 6:39 pm

See subject.

mikeshinn · **Posted:** Thu Aug 27, 2009 6:41 pm

It can do that, you just need to change the SSL path to the plesk SSL key.

breun · **Posted:** Thu Aug 27, 2009 6:58 pm

You mean edit /var/asl/etc/httpd/conf.d/ssl.conf and set SSLCertificateFile /usr/local/psa/admin/conf/httpsd.pem or something?

mikeshinn · **Posted:** Thu Aug 27, 2009 7:01 pm

Yep.

breun · **Posted:** Thu Aug 27, 2009 7:10 pm

Doesn't seem to work, asl-httpd won't start after that change. From /var/asl/etc/httpd/logs/asl_ssl_error_log:

Quote:

[warn] RSA server certificate is a CA certificate (BasicConstraints: CA == TRUE !?)
[Fri Aug 28 01:06:20 2009] [error] Unable to configure RSA server private key
[Fri Aug 28 01:06:20 2009] [error] SSL Library Error: 185073780 error:0B080074:x509 certificate routines:X509_check_priv
ate_key:key values mismatch

mikeshinn · **Posted:** Fri Aug 28, 2009 10:47 am

You need to configure all the SSL settings just like you have in Plesk. Take a look at the plesk SSL config file if you want to use their keys. You must configure it just like they have.

Let the ASL web interface use Plesk's SSL cert if available

Who is online