Lets Encrypt Certificate for Mailserver and Webmail.
As descriebed earlier
Fully completed since SSL It! 1.2.0: https://ext.plesk.com/packages/3c4117f6-c05c-4d3b-9173-60f10096a9c4-sslit
Note that SNI for Mail is available since Plesk Obsidian, and only for MailEnable and Postfix+Dovecot (at that old OSes aren’t supported).
Webmail securing is available since Plesk Onyx.
-
TRILOS new media commented
Let´s try it with https://plesk.uservoice.com/forums/184549-feature-suggestions/filters/new?category_id=82696 with a smart description so it won´t be marked as "finished" again.
-
Anonymous commented
We could fetch all Domains and create a catch-all-certificate.
-
Anonymous commented
@plesk staff what are the plan for SAN LE certificate support in imap pop smtp servers ?
-
Jose commented
we would like to have different mail servers certificates, one for each mail server domain
-
Anonymous commented
(to secure the mail communication for multiple domains)
-
Anonymous commented
Thanks @twistedpixel. After install extension "Panel.ini Editor" I added two lines:
[ext-letsencrypt] acme-directory-url https://acme-v02.api.letsencrypt.org/directory ( default value: )
[ext-letsencrypt] acme-protocol-version acme-v02 ( default value: )And it works ...
-
twistedpixel commented
Wildcard certs are now available through the extension with minimal effort (a single change in panel.ini). No auto-renew for them yet but I’ll happily take that caveat for much less hassle.
-
Anonymous commented
The Feature "Secure webmail on this domain" doesn't genereate a certificate for imap.mydomain.com and smtp.mydomain.com. Only webmail.mydomain.com is added. This is not enough. Please add this feature!
-
Fube commented
Says started, but only Webmail part...
...Mail server in plesk is the worst mail server one can use. Fix that first please.
-
Jolly commented
"Fehler: Could not issue a Let's Encrypt SSL/TLS certificate for ****.eu. Authorization for the domain failed."
Sorry: No automatic re-new under Plesk! :-/
-
Chris Bischoff commented
It doesn't work in the multiserver panel, can this be integrated?
-
G J Piper commented
v2.2.2+ doesn't work for webmail if the domain name isn't hosting a website on the server. Using the extension to encrypt webmail.domain.ext on a strictly mail server isn't possible -- would like it to be! :-) Please make it so.
-
Anonymous commented
I think you can add an auto redirect to https when webmail have an ssl created by your extension.
-
Jan Bludau commented
really a step forward.
-
inakilb commented
I think you can improve Let's Encrypt extension, just adding a bunch of checkboxes with current DNS A and CNAME records, so we can check them as Webmail since 2.1.0 version of extension.
Also yo can add an option to include DNS records for domains aliases, subdomains etc., something similar to this: https://plesk.uservoice.com/forums/184549-feature-suggestions/suggestions/18527845-san-support-in-plesk-let-s-encrypt
-
Chris Pettet commented
@Aaron McHale unfortunately the last part falls on deaf ears. I am a programmer too and if someone asks, I deliver, even for free paying customers. Unfortunately, unlike Plesk, I make sure something is working before I add on other features. Anyway, I've had my say and I've moved on so let's just leave it there shall we?
-
Aaron McHale commented
@Chris Pettet - you pay for the Plesk License, this is an Aron feature which they develop, maintain and provide without asking for any additional fees, unlike some other panels. Like I said they maintain and develop a huge system, while LE is important there's probably other stuff which has a higher priority, and as someone who develops software I know what's it's Luke being on the other end, so step back and think about the digger picture.
-
Chris Pettet commented
@Aaron McHale
How can you say they give this extension "for free" when you pay a monthly fee to be able to use their software? Letsencrypt is free and you can quite easily do what they do (and much more) for free from a command line. If you look at the number of requests for this feature and to be able to include any sub-domain rather than just webmail (which incidentally they had a long time ago but it just didn't work) I rest my case. I am now using a whole CP for free which has LE incorporated into it and it does much more than what Plesk can currently do.
-
Aaron McHale commented
@Chris Pettet - Given they provide the extension for free don't you think that's a bit self entitled, and given that they have lots of feature requests and lots of things to maintain, do you expect every single feature to be implemted at the snap of your fingers?
-
Chris Pettet commented
Now you all see why I went elsewhere. You pay for a service but they just don't listen.