We are happy to announce that Vesta is back under active development as of 25 February 2024. We are working on v1 candidate and expect to engage more with the community over the coming months. We are committed to open source, and we encourage contributors to help us build the future of Vesta.
Setup Multiple SSL Certificate
Re: Setup Multiple SSL Certificate
Hello, this feature (multiple SSL on single IP address) is called as SNI and in VestaCP should work out of the box without additional changes.
Re: Setup Multiple SSL Certificate
Yes it works for web domains ...
but does it works also for exim & dovecot ?
but does it works also for exim & dovecot ?
-
- Posts: 36
- Joined: Thu Dec 05, 2013 10:55 am
Re: Setup Multiple SSL Certificate
Maybe this will help you.
Configuring Exim
By default, Vesta does not install Exim 4 with SMTP TLS support. That means that emails are sent in clear text to the server, and that's not optimal. We'll need to reconfigure Exim with SMTP TLS support. How do we do that?
nano /etc/exim4/exim4.conf.template
You'll notice that the following lines are commented out, just so.
#tls_advertise_hosts = *
#tls_certificate = /usr/local/vesta/ssl/certificate.crt
#tls_privatekey = /usr/local/vesta/ssl/certificate.key
Simply uncomment them! To do that, remove the # preceding the lines that we need to get Exim to work with SSL, as shown below.
tls_advertise_hosts = *
tls_certificate = /usr/local/vesta/ssl/certificate.crt
tls_privatekey = /usr/local/vesta/ssl/certificate.key
Now save the file and restart Exim.
Configuring Exim
By default, Vesta does not install Exim 4 with SMTP TLS support. That means that emails are sent in clear text to the server, and that's not optimal. We'll need to reconfigure Exim with SMTP TLS support. How do we do that?
nano /etc/exim4/exim4.conf.template
You'll notice that the following lines are commented out, just so.
#tls_advertise_hosts = *
#tls_certificate = /usr/local/vesta/ssl/certificate.crt
#tls_privatekey = /usr/local/vesta/ssl/certificate.key
Simply uncomment them! To do that, remove the # preceding the lines that we need to get Exim to work with SSL, as shown below.
tls_advertise_hosts = *
tls_certificate = /usr/local/vesta/ssl/certificate.crt
tls_privatekey = /usr/local/vesta/ssl/certificate.key
Now save the file and restart Exim.
Re: Setup Multiple SSL Certificate
Thank you but i have multiple ssl certificates
For instance, one certificate for mydomain1.com and a second for mydomain2 com
How to manage this context under exim & dovecot ?
JP
For instance, one certificate for mydomain1.com and a second for mydomain2 com
How to manage this context under exim & dovecot ?
JP
-
- Posts: 36
- Joined: Thu Dec 05, 2013 10:55 am
Re: Setup Multiple SSL Certificate
Like I said above.
Tell Exim to use what SSL for what purpose.
If you use SSL Certificate 1 for your domain you can put it via panel or put in inside /home/$username/conf/web/snginx.conf
Hope this is clear enough for you.
Tell Exim to use what SSL for what purpose.
If you use SSL Certificate 1 for your domain you can put it via panel or put in inside /home/$username/conf/web/snginx.conf
If you are going to use SSL for exim, use the same way:ssl_certificate /home/$username/conf/web/sslcertificate1.pem;
ssl_certificate_key /home/$username/conf/web/sslcertificate1.key;
Then restart EXIM.tls_advertise_hosts = *
tls_certificate = /yourfavorite/location/for/ssl/sslcertificate2.crt
tls_privatekey = /yourfavorite/location/for/ssl/sslcertificate2.key
Hope this is clear enough for you.