secure webmail using wildcard SSL certificate

[mpecon]

After doing many searches I have been unable to work out how to get horde to work with a wildcard SSL on plesk 11.5.

The wildcard SSL certificate works for the domain and subdomains but webmail seems to want to use the self signed certificate provided by the machine.

The "webmail.domain.com" is an alias and not a subdomain.

There are similar threads but are all for much older version of plesk.

Many thanks

 

[Lloyd_mcse]

I edited..

Apache
/etc/apache2/plesk.conf.d/horde.conf

SSLCertificateFile "/etc/ssl/wildcard.pem"
SSLCertificateCAFile "/etc/ssl/wildcard.pem"

NGINX
/etc/nginx/plesk.conf.d/webmail.conf

ssl_certificate /etc/ssl/wildcard.pem;
ssl_certificate_key /etc/ssl/wildcard.pem;

But you have to update the templates to.

/opt/psa/admin/conf/templates/horde.php
/opt/psa/admin/conf/templates/nginxWebmailPartial.php

Copy them to

/opt/psa/admin/conf/templates/custom/

Then edit.
Regards

Lloyd

 

[mpecon]

Hi Lloyd,

Many thanks indeed!

The line SSLCertificateCAFile caused errors, so I left it out of /etc/apache2/plesk.conf.d/horde.conf

I have one ip address with multiple domains and I have one wildcard SSL for one of the domains.

Am I correct in guess that if I wanted another wildcard SSL for one of the other domains that this would not work?

Once again, many thanks for your prompt solution.

Regards,

Michael

 

[Lloyd_mcse]

Yeah that's right, you can only use one domain as far as I can tell.

With regards to the SSLCertificateCAFile, it should have been..

SSLCertificateFile "/etc/ssl/webmail.pem"
SSLCACertificateFile "/etc/ssl/certs/webmail.ca"

SSLCertificateFile = private key, and certificate
SSLCACertificateFile = intermediate certificate

I found if I didn't have the CA part I got chain issues when testing the domain at..

https://www.ssllabs.com/ssltest/index.html

Hope it helps
Regards

Lloyd

 

[Lloyd_mcse]

Or, you can do it like..

SSLCertificateKeyFile "/etc/ssl/private/webmail.key"
SSLCertificateFile "/etc/ssl/certs/webmail.crt"
SSLCACertificateFile "/etc/ssl/certs/webmail.ca"

I've just changed mine to this, keep everything separate.