• We value your experience with Plesk during 2024
    Plesk strives to perform even better in 2025. To help us improve further, please answer a few questions about your experience with Plesk Obsidian 2024.
    Please take this short survey:

    https://pt-research.typeform.com/to/AmZvSXkx
  • The Horde webmail has been deprecated. Its complete removal is scheduled for April 2025. For details and recommended actions, see the Feature and Deprecation Plan.
  • We’re working on enhancing the Monitoring feature in Plesk, and we could really use your expertise! If you’re open to sharing your experiences with server and website monitoring or providing feedback, we’d love to have a one-hour online meeting with you.

Renew pop3 SSL

Dave W

Regular Pleskian
Howdy,

Plesk 12.5, postfix MTA.

Ive been playing around with gmail connecting to my VPS for mail, however gmail wont accept an expired SSL cert for POP3 on port 995 [Server returned error: "SSL error: certificate has expired"]

Is there a kb that shows how to renew the SSL certs for pop3s and imaps aswell?

Dave_W
 
OK, so to renew the SSLs for postfix smtp and pop3s and imaps:

Code:
Backup old plesk ssl cert:
cd /usr/local/psa/admin/conf/
mv httpsd.pem{,.old}

Create new cert of same name:
openssl req -new -nodes -x509 -out httpsd.pem -newkey rsa:2048 -keyout httpsd.pem -days 3650

Set Permission:
chmod 400 httpsd.pem

Backup old smtp, imap and pop certs:
mv /etc/postfix/postfix_default.pem /etc/postfix/postfix_default.old
mv /usr/share/imapd.pem /usr/share/imapd.old
mv /usr/share/pop3d.pem /usr/share/pop3d.old

Copy cert to imapd.pem pop3d.pem and postfix_default.pem
cp -p httpsd.pem /usr/share/imapd.pem
cp -p httpsd.pem /usr/share/pop3d.pem
cp -p httpsd.pem /etc/postfix/postfix_default.pem

So now at least the SSLs arent out of date, however now gmail complains that the SSLs are self-signed.
 
Back
Top