Article ID: 893, created on Oct 6, 2008, last review on May 11, 2014

Resolution

There is no possibility to change SSL certificate used by Expand control panel through the interface in current versions. However you can set up the SSL certificate manually as it was shown in the example.

If Expand is installed with Plesk Contorl Panel add the SSL options below into configuration file /usr/local/psa/admin/conf/httpsd.expand.include.

SSLVerifyClient none
SSLCertificateFile /usr/local/expand/etc/expand.crt.pem


Where /usr/local/expand/etc/expand.crt.pem is a PEM-file with the SSL certificate got from a certification authority.

In standalone Expand you should look into
/usr/local/expand/frontend/conf/httpd_vhost.conf for SSLCertificateFile
and SSLCertificateKeyFile directives to find the certificate location.
Certificate and private key are stored in PEM-file /usr/local/expand/frontend/conf/httpsd.pem.

NOTE: Since version 2.2 Expand uses it's own web server (Lighttpd) with configuration file /etc/sw-cp-server/applications.d/01_expand.conf, the certificate path is /usr/local/expand/frontend/conf/httpsd.pem.

~# grep ssl.pemfile /etc/sw-cp-server/applications.d/01_expand.conf
ssl.pemfile = "/usr/local/expand/frontend/conf/httpsd.pem"
~#

Upload your PEM-file certificate.pem to the server and reconfigure /etc/sw-cp-server/applications.d/01_expand.conf.

ssl.pemfile = "/path/to/certificate.pem"

Then restart Expand HTTP server to apply the changes:

~# /etc/init.d/sw-cp-server restart

AdditionalInformation

A PEM-file with SSL certificate contains certificate and private key, enclosed between the appropriate BEGIN/END-lines (CERTIFICATE or RSA PRIVATE KEY).

-----BEGIN RSA PRIVATE KEY-----
MIIEogIBAAKCAQEAtoaMxYC3k5uKoQp1Wu5iWYZ2w6O+U9YtZeJUqq/nHBAQYQDA
...
jjXWcjE7FPIR/QVfPY6LD7n2tdYBNnOzyN2V7CdJARz+q8SbvkY=
-----END RSA PRIVATE KEY-----

-----BEGIN CERTIFICATE-----
MIIDiTCCAnECBEUglDQwDQYJKoZIhvcNAQEEBQAwgYgxCzAJBgNVBAYTAlVTMREw
...
usTq9edCyLwziEFYlsH4rO/romh0J47GIW3mfWz7jXXT8AHxtUpxt6Li06TI
-----END CERTIFICATE-----

Email subscription for changes to this article
Save as PDF