• Our team is looking to connect with folks who use email services provided by Plesk, or a premium service. If you'd like to be part of the discovery process and share your experiences, we invite you to complete this short screening survey. If your responses match the persona we are looking for, you'll receive a link to schedule a call at your convenience. We look forward to hearing from you!
  • We are looking for U.S.-based freelancer or agency working with SEO or WordPress for a quick 30-min interviews to gather feedback on XOVI, a successful German SEO tool we’re looking to launch in the U.S.
    If you qualify and participate, you’ll receive a $30 Amazon gift card as a thank-you. Please apply here. Thanks for helping shape a better SEO product for agencies!
  • The BIND DNS server has already been deprecated and removed from Plesk for Windows.
    If a Plesk for Windows server is still using BIND, the upgrade to Plesk Obsidian 18.0.70 will be unavailable until the administrator switches the DNS server to Microsoft DNS. We strongly recommend transitioning to Microsoft DNS within the next 6 weeks, before the Plesk 18.0.70 release.
  • The Horde component is removed from Plesk Installer. We recommend switching to another webmail software supported in Plesk.

SSL for single domain mail

Tsi-Shawn

Basic Pleskian
Good morning,

I am running OS CentOS 6.7 (Final) Plesk version 12.0.18 Update #78, and I have an SSL that was used to secure the panel set in postfix. It is generating errors for people because of the mismatch name. Is there a way for a customer to purchase his own SSL and apply it to his domain for mail alone?

So mail.logisticssoftware.com needs to be secured in mail. I can create a CSR for that domain but where do I set it in postfix to use that cert for that domain only and a different one for a different domain?
 
Hi Tsi-Shawn,

Have a read of the docs here...

http://docs.plesk.com/en-US/12.5/ad...-for-qmail-or-courierimap-mail-servers.60162/

Note: Missing Dovecot and Postfix certificate paths.

Postfix: /etc/postfix/postfix_default.pem
Dovecot: /etc/dovecot/private/ssl-cert-and-key.pem

Basically download/copy and paste the certificate parts from the panel and combine into a .pem file, and upload replacing the current .pem files.
I hope that helps
Regards

Lloyd
 
Thanks I have done that which is why people get a name mismatch because each domain sends and receives mail with mail.<domainname> and I have the cert that was created for the server, not an individual domain. Securing the path you suggested would work for the one guy that has an SSL but not for the other 200 domains trying to use that main postfix path. Again, I have a customer trying to get his own SSL to secure just his mail. Can he do so while NOT using the mail SSL for postfix? How can each domain using mail.<domainname> secure their email with a proper certificate?

While it has been working and customers just need to say yes trust this cert some people keep getting the pop up because of mail programs not remembering that the name mismatch is ok.
 
@Tsi-Shawn

Unfortunately I don't think Plesk supports multiple SSL certificates for mail services.

I'd recommend having your clients use the servers hostname to avoid SSL warnings.
 
Back
Top