• Debian 11 has reached its end-of-life (vendor EOL date - August 31, 2026). Plesk Obsidian 18.0.81 is the last release to support it.
    If you are running Plesk Obsidian on Debian 11, we recommend you upgrade those servers to Debian 12 using our dist-upgrade tool.
  • We plan to deprecate and remove the support for XML RPC protocol versions earlier than 1.6.9.1 in Plesk Obsidian 18.0.82. We strongly recommend that you update all existing integrations using earlier versions of the XML RPC protocol to comply with the version 1.6.9.1 specification.

Renew pop3 SSL

Dave W

Regular Pleskian
Howdy,

Plesk 12.5, postfix MTA.

Ive been playing around with gmail connecting to my VPS for mail, however gmail wont accept an expired SSL cert for POP3 on port 995 [Server returned error: "SSL error: certificate has expired"]

Is there a kb that shows how to renew the SSL certs for pop3s and imaps aswell?

Dave_W
 
OK, so to renew the SSLs for postfix smtp and pop3s and imaps:

Code:
Backup old plesk ssl cert:
cd /usr/local/psa/admin/conf/
mv httpsd.pem{,.old}

Create new cert of same name:
openssl req -new -nodes -x509 -out httpsd.pem -newkey rsa:2048 -keyout httpsd.pem -days 3650

Set Permission:
chmod 400 httpsd.pem

Backup old smtp, imap and pop certs:
mv /etc/postfix/postfix_default.pem /etc/postfix/postfix_default.old
mv /usr/share/imapd.pem /usr/share/imapd.old
mv /usr/share/pop3d.pem /usr/share/pop3d.old

Copy cert to imapd.pem pop3d.pem and postfix_default.pem
cp -p httpsd.pem /usr/share/imapd.pem
cp -p httpsd.pem /usr/share/pop3d.pem
cp -p httpsd.pem /etc/postfix/postfix_default.pem

So now at least the SSLs arent out of date, however now gmail complains that the SSLs are self-signed.
 
Back
Top