PLESK security certificate revoked

Today, i revoked a PLESK server’s security certificate and had to login via HTTP to make a new one.

First, if the server’s security certificate is revoked, you are in trouble, the reason is, you have to use plain HTTP as Mozilla Firefox, Internet Explorer and Google chrome will not let you in.

To get this out of the way, PLESK does allow you to login via HTTP (Not recommended), you can do that by visiting your server with PORT NUMBER 8880, so to open in plain HTTP (Plain text) you simply visit http://myserver.mydomain.com:8880/ but as you may well know, you are putting the server at risk of someone hijacking your server

So what i did is this

I assume you have putty, i SSHed to the server where i have set a tunnel using putty’s SSH tunnel feature, then logged in to the server via HTTP, this is how it works, when you browse the internet, you are actually asking your plesk server to get the pages for you, and therefore when you visit the http page via an ssh tunnel, your connection to the server is in reality encrypted (With the SSH tunnel).

Right after, you can visit settings => ssl certificates => Add SSL certificate => Add a certificate

Then you would go to settings => ssl certificates => put a tick beside the certificate you want to use for the server, then click on “Secure Control Panel” and you should be done and ready to go again

In some cases, you can self sign your certificate, meaning you do not need a third party to certify that you are you, but this will notify the visitors that there is no trusted authority on the certificate, so i only use a self signed certificate when i am the one who will be logging in, surely i do trust myself $25.99 (I get that price here)

Anyway, i hope this has got you a way around connecting via http in plain text, happy administrating

Leave a Reply