Plesk SSL Certificate for SMTPs, IMAPs, POP3s

[KungPow]

Hi,

I have the ssl certificate setup in 'server management -> tools & settings -> ssl certificates'. It works for the website but not for the email protocols (imaps, pop3s, smtps). The email protocols are still using the generic Parallels Panel SSL.

How do I get SSL installed for email? I'm not familiar with linux and I don't understand this article (http://kb.parallels.com/1062). Is there a more detailed article regarding ssl install for email?

Also, when I try to read the existing certificate, I get denied. How do I read it?
cat /usr/share/courier-imap/imapd.pem -> permission denied
cat /usr/share/courier-imap/pop3d.pem -> permission denied

Thanks

 

[Faris Raouf]

You will need to change to the root user in order to access the files in question.

I hesitate to answer the rest of your question in detail because I don't want to accidentally give you instructions which may be wrong, at least for your OS, and potentially cause you problems.

What I can say is that a shortcut was to create a .pem file containing what you need is to go to your list of certificates in Plesk then click on the floppy disk (download) icon next to the certificate you have installed. This will download a .pem containing all the elements needed as described in the KB. However, it also contains something that may not be wanted and might cause a problem if you include it (I don't know for sure). Specifically, the downloaded .pem contains the CSR (Certificate Signing Request) part as well as everything else, which you may want to just delete from the downloaded .pem file (leaving all the other bits intact). TIP: Don't use Notepad in Windows for editing files - it can add invisible and unwanted bits at the end of lines). Use notepad++ or some other well-behaved plain text editor instead.

You can then transfer this file to your server, and copy it over the two files (imap/pop3). BACKUP THE EXISTING FILES FIRST!

Alternatively (and I warn you I've never tried this and also this is for Centos), you'll find /usr/local/psa/admin/conf/httpsd.pem and /usr/local/psa/admin/conf/rootchain.pem which, between them, contain all the elements of the certificate that you need (I think). You can combine these into one file, then copy them over the imap and pop3 .pem files. REMEMBER - BACKUP THE ORIGINAL FIRST!

 

[Eric Pretorious]

I have the ssl certificate setup in 'server management -> tools & settings -> ssl certificates'. It works for the website but not for the email protocols (imaps, pop3s, smtps). The email protocols are still using the generic Parallels Panel SSL.

Hey, KungPow:

I was lucky enough to discover this tool on the Networking4All Web site but I'm curious: How did you determine that Courier & Postfix are/were using the default Plesk certificate?