• Please be aware: Kaspersky Anti-Virus has been deprecated
    With the upgrade to Plesk Obsidian 18.0.64, "Kaspersky Anti-Virus for Servers" will be automatically removed from the servers it is installed on. We recommend that you migrate to Sophos Anti-Virus for Servers.
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Resolved (Cloud server with multiple domains) SSL Wildcard not works with subdomains ftp/mail/webmail

MicheleB

Regular Pleskian
Hello,
I'd like to activate a Rapid SSL Wildcard for a specific domain on my cloud server (more domains/hosting hosted on the server) to encrypt the domain's activity on ftp, mail and webmail but it works only on generic subdomains (ex. mysubdomain.mydomain.com).

Sum up, it works on:
mydomain.com
www.mydomain.com
mygenericsubdomain1.mydomain.com
mygenericsubdomain2.mydomain.com
...

Not works on (view every time the default SSL certificate on Plesk):
ftp.mydomain.com
mail.mydomain.com
webmail.mydomain.com

Is it a correct behaviour or I've a Plesk configuration's problem?
Plesk allow only a unique Wildcard SSL for ftp/mail/webmail subdomains (the Wildcard SSL used for the primary domain on the cloud server, the default Plesk SSL)?
If is it a Plesk 12.5 limitation, the new Onyx has this features?

Thanks!
 
Last edited:
Hi MicheleB,

Is it valid also for ftp.mydomain.com?
No, because your ProFTP - server uses the configuration from "/etc/proftpd.conf" ( as for example: )

Code:
...
    TLSRSACertificateFile /opt/psa/admin/conf/httpsd.pem
    TLSRSACertificateKeyFile /opt/psa/admin/conf/httpsd.pem
...

But the mentioned solution for your unique certificate order and structure ( as mentioned for "servercert.pem", "postfix_default.pem" and "ssl-cert-and-key.pem" ) is certainly the exactly same solution for your ( new ) "httpsd.pem" - file:

...
  1. The Private Key
  2. The primary certificate
  3. The intermediate certificate
  4. The root certificate
...
 
Hi,
do I need to restart only qmail/postfix and courier-imap services with this command?
/usr/local/psa/admin/sbin/mailmng --restart-service

For "/etc/proftpd.conf" is necessary only save the new configuration?

Thanks
 
Back
Top