• Introducing WebPros Cloud - a fully managed infrastructure platform purpose-built to simplify the deployment of WebPros products !  WebPros Cloud enables you to easily deliver WebPros solutions — without the complexity of managing the infrastructure.
    Join the pilot program today!
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.

Renew pop3 SSL

Dave W

Regular Pleskian
Howdy,

Plesk 12.5, postfix MTA.

Ive been playing around with gmail connecting to my VPS for mail, however gmail wont accept an expired SSL cert for POP3 on port 995 [Server returned error: "SSL error: certificate has expired"]

Is there a kb that shows how to renew the SSL certs for pop3s and imaps aswell?

Dave_W
 
OK, so to renew the SSLs for postfix smtp and pop3s and imaps:

Code:
Backup old plesk ssl cert:
cd /usr/local/psa/admin/conf/
mv httpsd.pem{,.old}

Create new cert of same name:
openssl req -new -nodes -x509 -out httpsd.pem -newkey rsa:2048 -keyout httpsd.pem -days 3650

Set Permission:
chmod 400 httpsd.pem

Backup old smtp, imap and pop certs:
mv /etc/postfix/postfix_default.pem /etc/postfix/postfix_default.old
mv /usr/share/imapd.pem /usr/share/imapd.old
mv /usr/share/pop3d.pem /usr/share/pop3d.old

Copy cert to imapd.pem pop3d.pem and postfix_default.pem
cp -p httpsd.pem /usr/share/imapd.pem
cp -p httpsd.pem /usr/share/pop3d.pem
cp -p httpsd.pem /etc/postfix/postfix_default.pem

So now at least the SSLs arent out of date, however now gmail complains that the SSLs are self-signed.
 
Back
Top