• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

Dovecot / Postfix // multiple SSL certificates for multiple IPs

southy

Basic Pleskian
The second-most wanted new feature according to your very own uservoice site is about the issue of allowing multiple SSL certificates on the SMTP / IMAP Servers.

Obviously for users that do only use shared IPs, the only way to implement multiple certificates would be SNI.
Yes, e.g. Dovecot does support SNI. However, that won't help us much, becuase this would also have to be supported by the clients of the users. And I suppose we won't see that happen anytime soon.

But it seems that is not much of a problem, because there's a much simpler way to get to the desired result:
Simply allow to configure multiple IPs in postfix / dovecot with different certificates on each.
All clients would be getting a dedicated IP and the problem would be solved.

With manual configuration this is already possible - dovecot & postfix can be configured to answer to multiple IPs with different SSL certificates - there's quite some documentation about this if you google a bit.

However this is where the old plesk problem kicks in: you can't properly manually change stuff like this on commandline, because the next Plesk update may revert all changes or break stuff.

So, plesk team: Could you please, pretty pretty PLEASE not concentrate on _AGAIN_ changing totally and utterly unimportant look-and-feel details, but implement a feature that's vital in 2015?!

Thanks!
 
I disagree this is vital. Using valuable IP addresses for something like SSL on an SMTP server, sounds a bit like 1990.. We wouldn't accept an IP request just for that. There are better alternatives, like using 1 hostname for your SMTP/POP/IMAP servers.
 
Back
Top