Question SSL Cert for Mail-Server

[wizziking]

Server operating system version

Debian 11

Plesk version and microupdate number

18.0.65 #2

Hi everyone,

I’m a bit confused about the configuration for a mail server.
We have a Plesk setup dedicated to our mail server.

I created an A record pointing to mail.example.com and set up MX records accordingly. In Plesk, I added the domain example.com with the "no hosting" option.
Everything is working fine so far, including webmail, which is accessible at webmail.example.com and secured with a Let's Encrypt SSL certificate.

However, I’m not sure how to get an SSL certificate for mail.example.com that will renew automatically.
Isn’t it possible for Plesk to start a temporary web server for mail.example.com when obtaining the certificate?

Unfortunately, I couldn’t find much information about this online. Most advice suggests creating a wildcard SSL certificate on the server hosting the website and then manually adding it to Plesk.

However, this seems unnecessarily complicated to me, as the certificate won’t automatically renew in Plesk this way.

 

[Kaspar]

However, I’m not sure how to get an SSL certificate for mail.example.com that will renew automatically.
Isn’t it possible for Plesk to start a temporary web server for mail.example.com when obtaining the certificate?

There (currently) isn't any practical way to achieve this in Plesk. However it looks like support for this feature seems to be imminent.

As an reliable alternative you can use the server host name (the one configured at Tools & Settings > Server Settings) for secured mail connections with mail clients.