How to Generate SSL Certificates for WEBMAIL and MAIL Subdomains in HestiaCP

[sahsanu]

I’ll edit my post in the other topic because it is not correct.

@caos30

Aren’t certificates for mail and webmail supposed to be generated BY DEFAULT when we add a certificate for an existing domain in a user’s account?

No, a web domain and a mail domain and two different types. Maybe you didn’t add support for mail domain when creating a web domain and viceversa.

@caos30

Or is there a requirement for this to happen? The existence of some DNS zone in that domain? In my case, I always had MAIL and WEBMAIL as A-type DNS records pointing to the server’s IP. Is an IMAP or SMTP record necessary? (I don’t think so)

Yes, the requirement is that you explicitly tell Hestia that the mail domain must use SSL.

@caos30

Could it be that if this domain name has NOTHING to do with the hostname defined on the server, it might prevent HestiaCP from automatically generating that certificate for MAIL and WEBMAIL?

No.

@caos30

what do you mean by this?

When you use the command:

v-add-letsencrypt-domain YourUser example.com www.example.com yes

As MAIL is yes, Hestia will issue a certificate for the sub domains mail.example.com and webmail.example.com so it will ignore the aliases, in this case www.example.com

To issue a certificate for the web domain and its aliases the command should be:

v-add-letsencrypt-domain YourUser example.com www.example.com 

or

v-add-letsencrypt-domain YourUser example.com www.example.com no