1 Topic by AndreyEver (edited by AndreyEver 2022-06-04 05:01:36)

  • AndreyEver
  • Member
  • Offline
  • Registered: 2022-05-15
  • Posts: 28

Topic: [Feature Request] Automate SSL cert issuing and DKIM on domain base

==== REQUIRED BASIC INFO OF YOUR IREDMAIL SERVER ====
- iRedMail version (check /etc/iredmail-release): 1.6.0
- Deployed with iRedMail Easy or the downloadable installer? downloadable
- Linux/BSD distribution name and version: Debina 11
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): MySQL
- Web server (Apache or Nginx):Nginx
- Manage mail accounts with iRedAdmin-Pro? Sure
- [IMPORTANT] Related original log or error message is required if you're experiencing an issue.
====

1. Automate SSL (Let's encrypt) cert issuing on domain base (like any other inhering policy - global/domain). This will allow using domain related DNS names to access services without manual scripting (currently there is a limitation in number of aliases in single LetsEncrypt SSL cert)

2. Same for DKIM with amavis integration

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2 Reply by ZhangHuangbin

  • ZhangHuangbin
  • ZhangHuangbin
  • iRedMail Developers
  • Offline
  • Registered: 2009-05-06
  • Posts: 31,082

Re: [Feature Request] Automate SSL cert issuing and DKIM on domain base

AndreyEver wrote:

1. Automate SSL (Let's encrypt) cert issuing on domain base (like any other inhering policy - global/domain). This will allow using domain related DNS names to access services without manual scripting (currently there is a limitation in number of aliases in single LetsEncrypt SSL cert)

Do i understand correctly that you create a virtual web host for each mail domain?

AndreyEver wrote:

2. Same for DKIM with amavis integration

No plan for this shortly, sorry.
How about one DKIM key for all email domains?

3 Reply by AndreyEver

  • AndreyEver
  • Member
  • Offline
  • Registered: 2022-05-15
  • Posts: 28

Re: [Feature Request] Automate SSL cert issuing and DKIM on domain base

ZhangHuangbin wrote:

Do i understand correctly that you create a virtual web host for each mail domain?

Correct. It's done for the purpose that every client (domain owner) can use his own URL like:
https://mail.domain1.xxx

4 Reply by AndreyEver

  • AndreyEver
  • Member
  • Offline
  • Registered: 2022-05-15
  • Posts: 28

Re: [Feature Request] Automate SSL cert issuing and DKIM on domain base

Davidcoigh wrote:

Great topic for discussion!
Is there a competent user?
I have an urgent question for the author How relevant is the topic.

Unfortunately there is no solution so far
We have to use separate server with RoundCube and self written scripts to manage domain based URL with SSL for RC (all the domains/clients use our MX and A records for mail protocols and ActiveSync)