How to add separate SSL certificates for each domain in the mail server?

VarunAlex

I have added two domains to the Mail Server domain list.

Non-SSL ports are working fine but when I try to send or receive emails from SSL/TLS ports, I'm getting an error. Basically, when adding SSL certificates from the Mail server GUI (from add SSL popup) it's overriding all other SSL certificates.

Suppose, I have two domains called abc.com & xyz.com
When I add abc.com SSL certificate it overrides xyz.com SSL certificate. Then I can't use SSL/TLS ports of the xyz.com domain. If I add xyz.com SSL certificate, I can't use xyz.com SSL/TLS ports.

Error example:
The server returned error "SSL error: ok Hostname "mail.abc.com" doesn't match any SANs: "*.xyz.com"

The server returned error "SSL error: ok Hostname "mail.xyz.com" doesn't match any SANs: "*.abc.com"

Is there any solution for this issue?

Thanks

kaleo

VarunAlex That is very easy friend, if you already managed to warn me, otherwise I will help you.

VarunAlex

Found a way to add SNI configurations to Devecot and Postfix (< 3.4)

SNI guide for dovecot: https://wiki.dovecot.org/SSL/DovecotConfiguration#With_client_TLS_SNI_.28Server_Name_Indication.29_support

Postfix: check the second answer
https://serverfault.com/questions/928926/postfix-multi-domains-and-multi-certs-on-one-ip/

Hopefully, aaPanel will add these manual tasks to the "add SSL" feature at the Mail Server plugin.

VarunAlex

kaleo I fixed it. Thanks