Parallels

Resolution

There is no possibility to change SSL certificate used by Expand control panel through the interface in current versions. However you can set up the SSL certificate manually as it was shown in the example.

If Expand is installed with Plesk Contorl Panel add the SSL options below into configuration file /usr/local/psa/admin/conf/httpsd.expand.include.

SSLVerifyClient none
SSLCertificateFile /usr/local/expand/etc/expand.crt.pem

Where /usr/local/expand/etc/expand.crt.pem is a PEM-file with the SSL certificate got from a certification authority.

In standalone Expand you should look into
/usr/local/expand/frontend/conf/httpd_vhost.conf for SSLCertificateFile
and SSLCertificateKeyFile directives to find the certificate location.
Certificate and private key are stored in PEM-file /usr/local/expand/frontend/conf/httpsd.pem.

NOTE: Since version 2.2 Expand uses it's own web server (Lighttpd) with configuration file /etc/sw-cp-server/applications.d/01_expand.conf, the certificate path is /usr/local/expand/frontend/conf/httpsd.pem.


Upload your PEM-file certificate.pem to the server and reconfigure /etc/sw-cp-server/applications.d/01_expand.conf.

ssl.pemfile = "/path/to/certificate.pem"

Then restart Expand HTTP server to apply the changes:

Additional information

A PEM-file with SSL certificate contains certificate and private key, enclosed between the appropriate BEGIN/END-lines (CERTIFICATE or RSA PRIVATE KEY).

-----BEGIN RSA PRIVATE KEY-----
MIIEogIBAAKCAQEAtoaMxYC3k5uKoQp1Wu5iWYZ2w6O+U9YtZeJUqq/nHBAQYQDA
...
jjXWcjE7FPIR/QVfPY6LD7n2tdYBNnOzyN2V7CdJARz+q8SbvkY=
-----END RSA PRIVATE KEY-----

-----BEGIN CERTIFICATE-----
MIIDiTCCAnECBEUglDQwDQYJKoZIhvcNAQEEBQAwgYgxCzAJBgNVBAYTAlVTMREw
...
usTq9edCyLwziEFYlsH4rO/romh0J47GIW3mfWz7jXXT8AHxtUpxt6Li06TI
-----END CERTIFICATE-----