• If you are still using CentOS 7.9, it's time to convert to Alma 8 with the free centos2alma tool by Plesk or Plesk Migrator. Please let us know your experiences or concerns in this thread:
    CentOS2Alma discussion
  • Inviting everyone to the UX test of a new security feature in the WP Toolkit
    For WordPress site owners, threats posed by hackers are ever-present. Because of this, we are developing a new security feature for the WP Toolkit. If the topic of WordPress website security is relevant to you, we would be grateful if you could share your experience and help us test the usability of this feature. We invite you to join us for a 1-hour online session via Google Meet. Select a convenient meeting time with our friendly UX staff here.

Forwarded to devs Empty dovecot.pem and postfix.pem certificates after upgrade to Plesk 17.8.9

virtubox

Regular Pleskian
Plesk Guru
TITLE:
Empty dovecot.pem and postfix.pem certificates after upgrade to Plesk 17.8.9
PRODUCT, VERSION, OPERATING SYSTEM, ARCHITECTURE:
Plesk Onyx v17.8.9
Debian 8.9 and Ubuntu 16.04.3 LTS
PROBLEM DESCRIPTION:
After the upgrade to the last Plesk release, mail server do not work .
By checking /var/log/maillog , I have noticed than postfix and dovecot display the same error : Can't load ssl_cert

Dovecot :
Code:
Jan 18 08:35:48 plesk dovecot: imap-login: Fatal: Can't load ssl_cert: There is no valid PEM certificate. (You probably forgot '<' from ssl_cert=<)

Postfix :
Code:
Jan 18 08:38:27 plesk postfix/smtpd[2585]: warning: cannot get RSA certificate from file "/etc/postfix/postfix.pem": disabling TLS support
Jan 18 08:38:27 plesk postfix/smtpd[2585]: warning: TLS library problem: error:0906D06C:PEM routines:PEM_read_bio:no start line:pem_lib.c:701:Expecting: TRUSTED CERTIFICATE:
Jan 18 08:38:27 plesk postfix/smtpd[2585]: warning: TLS library problem: error:140DC009:SSL routines:SSL_CTX_use_certificate_chain_file:PEM lib:ssl_rsa.c:708:
STEPS TO REPRODUCE:
upgrade from Plesk v17.8.8 to v18.8.9 and renew or edit ssl certificates used to secure the mail server .

I haven't tried to replace the SSL/TLS certificate on another Plesk server but this issue already happened on two servers just after the upgrade.​
ACTUAL RESULT:
No error into the Plesk interface, but dovecot.pem and postfix.pem are empty and mail server isn't availalble​
EXPECTED RESULT:
Certificates set into the Plesk interface are added to the mail server configuration​
ANY ADDITIONAL INFORMATION:
Issue can be fixed by downloading letsencrypt SSL certificate from Plesk and by putting is content into dovecot.pem and postfix.pem.
YOUR EXPECTATIONS FROM PLESK SERVICE TEAM:
Confirm bug
 
Back
Top