• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion

Forwarded to devs Empty dovecot.pem and postfix.pem certificates after upgrade to Plesk 17.8.9

virtubox

Regular Pleskian
Plesk Guru
TITLE:
Empty dovecot.pem and postfix.pem certificates after upgrade to Plesk 17.8.9
PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE:
Plesk Onyx v17.8.9
Debian 8.9 and Ubuntu 16.04.3 LTS
PROBLEM DESCRIPTION:
After the upgrade to the last Plesk release, mail server do not work .
By checking /var/log/maillog , I have noticed than postfix and dovecot display the same error : Can't load ssl_cert

Dovecot :
Code:
Jan 18 08:35:48 plesk dovecot: imap-login: Fatal: Can't load ssl_cert: There is no valid PEM certificate. (You probably forgot '<' from ssl_cert=<)

Postfix :
Code:
Jan 18 08:38:27 plesk postfix/smtpd[2585]: warning: cannot get RSA certificate from file "/etc/postfix/postfix.pem": disabling TLS support
Jan 18 08:38:27 plesk postfix/smtpd[2585]: warning: TLS library problem: error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:701:Expecting: TRUSTED CERTIFICATE:
Jan 18 08:38:27 plesk postfix/smtpd[2585]: warning: TLS library problem: error:140DC009:SSL routines:SSL_CTX_use_certificate_chain_file:PEM lib:ssl_rsa.c:708:
STEPS TO REPRODUCE:
upgrade from Plesk v17.8.8 to v18.8.9 and renew or edit ssl certificates used to secure the mail server .

I haven't tried to replace the SSL/TLS certificate on another Plesk server but this issue already happened on two servers just after the upgrade.​
ACTUAL RESULT:
No error into the Plesk interface, but dovecot.pem and postfix.pem are empty and mail server isn't availalble​
EXPECTED RESULT:
Certificates set into the Plesk interface are added to the mail server configuration​
ANY ADDITIONAL INFORMATION:
Issue can be fixed by downloading letsencrypt SSL certificate from Plesk and by putting is content into dovecot.pem and postfix.pem.
YOUR EXPECTATIONS FROM PLESK SERVICE TEAM:
Confirm bug
 
Back
Top