Question Obsidian 18.0.52 wrong certificates selected after renew

[haax]

Server operating system version

linux

Plesk version and microupdate number

18.0.52

Hi all,

I have an issue with a (hosted) Plesk setup.
There are a couple of sites configured, including letsencrypt certificates.

For a specific site I am using an alternative certificate for the mail server (SMTP/IMAP).
By default it uses the "domain.com" cert, but I use "mail.domain.com". (also an Letsencrypt cert)

It works fine until the certificates are (auto) renewed. After the renewal the default certs are selected. (and my mailclients get an certificate error).

Is this known behavior or an bug?

Martin

 

[Peter Debik]

How was the alternative certificate for the mail server created? Currently I cannot imagine how that was done, because the configuration you describe is unsupported. Probably this feature request matches the case: Add "mail.example.com" (mail subdomain) in Subject Alternative Names when option "Assign the certificate to mail domain" is selected, but it's not implemented yet.

 

[Maarten]

I fixed this with a cron job that executes every hour:

"Run a command": /sbin/plesk bin subscription_settings -u domain.com -mail_certificate "Lets Encrypt mail.domain.com"

The cron job runs as root, so customers can't set this up themself.

 

[Maarten]

This is a similar UserVoice:

Feature Suggestions – Your Ideas for Plesk