Issue LE Certs for mail.dom.tld when Plesk is only serving Mail Only Services

[futureweb]

Server operating system version

not applicable

Plesk version and microupdate number

Plesk Obsidian Version 18.0.46 Update #2

Hello,

currently there is the problem that the following scenario cannot really be mapped in a practical way:
- (www).dom.tld - is NOT pointing to Plesk Server
- mail.dom.tld - is pointing to Plesk Server

There is the problem that the certificate for mail.dom.tld has to be manually assigned to "dom.tld" for the mail services after each renew. With hundreds / thousands of domains in this configuration, this is an unreasonable effort. (See: https://support.plesk.com/hc/en-us/articles/360011198339)

There are already 3 feature requests regarding this issue:
- Add possibility issue Let's Encrypt SSL certificate for mail server when the "A" DNS record for domain is pointing to another server
- Use "Let's encrypt" to secure IMAP/POP/SMTP connections
- Issuing Let's Encrypt certificates for mail.domain.tld (to secure SMTP POP IMAP) without web-hosting enabled on the main domain.

Say there are many Plesk admins who are facing the same scenario ...

1) Can the problem be escalated to one of your PMs please? Possibly does he recognize the underlying problem and can force a solution?
2) Can the feature requests be combined? Currently the votes are split into 3 requests and will probably never get so high that Plesk does something here...

Thank you, best regards from Tyrol
Amdreas

 

[TRILOS new media]

Any news?

 

[Kaspar@Plesk]

We actually have this on our roadmap with features we'd like to release. Development hasn't started yet and there is no ETA on this (it might be a while).

 

[futureweb]

@TRILOS new media you may want to have a look at the script we are using to overcome this massive problem until Plesk fixes it in about 15 years ...

GitHub - futureweb/Plesk-Postfix-SNI-TLS-Cert-Fixer: SNI-TLS Cert Fixer for mail.dom.tld LE Certs when dom.tld is not pointing to Plesk Server itself. More Information here: https://talk.plesk.com/threads/issues-with-ssl-certificate-renewal-for-mail-

SNI-TLS Cert Fixer for mail.dom.tld LE Certs when dom.tld is not pointing to Plesk Server itself. More Information here: https://talk.plesk.com/threads/issues-with-ssl-certificate-renewal-for-mail-...

github.com