Resolved plesks mail server cert will not update

[TomBoB]

mail server cert seems to be stuck on the default parallels cert. and cannot be updated.

Done hte tools & settings , etc as per https://support.plesk.com/hc/en-us/articles/115000179934 which shows it SHOULD use the lets encrypt cert. however it is still on parallels default.

Tried to set the mail servers cert as per How to secure Plesk and mail server with Let's Encrypt certificate via CLI? and that didn't help either.

email clients stilll are served the default parallels cert.
And a

openssl s_client -showcerts -connect proper.hostname.com:995

still results in

CONNECTED(00000003)
depth=0 C = US, ST = Virginia, L = Herndon, O = Parallels, OU = Parallels Panel, CN = Parallels Panel, emailAddress = [email protected]
verify error:num=18:self signed certificate
verify return:1
depth=0 C = US, ST = Virginia, L = Herndon, O = Parallels, OU = Parallels Panel, CN = Parallels Panel, emailAddress = [email protected]
verify error:num=10:certificate has expired
notAfter=Dec  1 12:04:42 2016 GMT
verify return:1
depth=0 C = US, ST = Virginia, L = Herndon, O = Parallels, OU = Parallels Panel, CN = Parallels Panel, emailAddress = [email protected]
notAfter=Dec  1 12:04:42 2016 GMT
verify return:1
---
Certificate chain
 0 s:/C=US/ST=Virginia/L=Herndon/O=Parallels/OU=Parallels Panel/CN=Parallels Panel/[email protected]
   i:/C=US/ST=Virginia/L=Herndon/O=Parallels/OU=Parallels Panel/CN=Parallels Panel/[email protected]

any idea what else I can try to get Plesks mail server recognise the proper cert instead the original; default?

Cheers,
Tom

 

[Bitpalast]

Please check your panel.ini file if it contains

[ext-letsencrypt]
key-algorithm = ECDSA
ecdsa-curve-name = prime256v1 ; can be omitted

The ECDSA certificates cannot be handled by the mail certificate setting. You need to remove ECDSA algorithm, then re-generate the certificate. It will then work again.

 

[TomBoB]

Hi Peter,

you're a star! Nailed it! Thanks for the help!!

I actually read the lets encrypt extension forum which makes it quite clear - however being down with Hepatitis A, I forgot it as quickly as I read it...

A big thanks again,
Tom