Article ID: 6963, created on Dec 3, 2009, last review on May 11, 2014

  • Applies to:
  • Plesk 9.2 for Linux/Unix
  • Plesk 9.2 for Windows

Symptoms

All domains on exclusive IP addresses that had SSL certificates from a domain's certificate pool assigned are reset to "default certificate," including the domain you just restored.

Here is how to reproduce the problem.

1) Create a domain on an exclusive IP address and install an SSL certificate in this domain's certificate pool. Then assign this certificate in the domain's Web Hosting Settings.

mysql> SELECT d.name, ip.ip_address, p.type, crt.name as certificate FROM domains d, clients c, ip_pool p, IP_Addresses ip, hosting h, certificates crt WHERE ip.id=p.ip_address_id AND p.id=c.pool_id AND d.cl_id=c.id AND h.dom_id=d.id AND h.ssl='true' AND h.ip_address_id=ip.id AND ip.ssl_certificate_id=crt.id;
+-------------+---------------+-----------+---------------------+
| name        | ip_address    | type      | certificate         |
+-------------+---------------+-----------+---------------------+
| domain1.tld | xxx.xxx.xxx.1 | exclusive | Custom certificate  |
| domain1.tld | xxx.xxx.xxx.2 | shared    | default certificate |
+-------------+---------------+-----------+---------------------+
2 rows in set (0.00 sec)

mysql>


2) Create a second domain. It doesn't matter whether it is on an exclusive or shared IP, or whether it uses its own certificate (in this case, the second domain uses its own certificate on an exclusive IP; however, the issue has been reproduced with a domain on a shared IP with the default certificate).

3) Create a backup of the second domain. Then restore the domain. You may make this restoration through the Parallels Panel GUI or via the command line.

All domains on exclusive IPs that had certificates from the domain's certificate pool assigned are reset to "default certificate," including the domain you just restored:

mysql> SELECT d.name, ip.ip_address, p.type, crt.name as certificate FROM domains d, clients c, ip_pool p, IP_Addresses ip, hosting h, certificates crt WHERE ip.id=p.ip_address_id AND p.id=c.pool_id AND d.cl_id=c.id AND h.dom_id=d.id AND h.ssl='true' AND h.ip_address_id=ip.id AND ip.ssl_certificate_id=crt.id;
+-------------+---------------+-----------+---------------------+
| name        | ip_address    | type      | certificate         |
+-------------+---------------+-----------+---------------------+
| domain1.tld | xxx.xxx.xxx.1 | exclusive | default certificate |
| domain1.tld | xxx.xxx.xxx.2 | shared    | default certificate |
+-------------+---------------+-----------+---------------------+
2 rows in set (0.00 sec)

mysql>


Resolution

The problem will be fixed in future update of Parallels Plesk Panel that will be released after version 9.2.3.

Meanwhile, the hotfix for Parallels Plesk Panel 9.2 is attached.

Download the .zip archive file and unpack it. Find the deployer (deployer.exe) file for your Parallels Plesk Panel version, operating system, and architecture.

On Linux/Unix, replace the existing /usr/local/psa/admin/sbin/deployer file with the fixed one, and then correct the permissions:

~# chown root:root /usr/local/psa/admin/sbin/deployer
~# chmod 550 /usr/local/psa/admin/sbin/deployer


On Windows, replace the existing deployer.exe file in %plesk_bin% with the fixed one.

Attachments

40d2202ee8e3c58205a757e0eb0cbb8e a914db3fdc7a53ddcfd1b2db8f5a1b9c 85a92ca67f2200d36506862eaa6ed6b8 aac4a8fcd879de03758354e15495d69a 11a46d8a188d618564f4f0cead9a50f3 29d1e90fd304f01e6420fbe60f66f838 6ef0db7f1685482449634a455d77d3f4 56797cefb1efc9130f7c48a7d1db0f0c

Email subscription for changes to this article
Save as PDF