https://mail.mydomain.com/roundcube/

[tsimtung]

Hi,
my client want to have a secure https webmail link:

https://mail.mydomain.com/roundcube/

how to do this?
www.mydomain.com is using another IP, only mail is using this server.
I have already added ssl access, and add cert for mail.mydomain.com, but it seems not ok for

https://mail.mydomain.com/roundcube/

Thanks,

Stanley

 

[Ohm J]

Just add domain to directadmin and request certs for mail.mydomain.com only.

 

[tsimtung]

hi, thanks for your reply.
what is the command line to do this?

 

[Ohm J]

Just do it in panel, like you hosting your website in directadmin, but ignore that and only request certs to "mail"

 

[Richard G]

I have already added ssl access, and add cert for mail.mydomain.com, but it seems not ok for

Did you added this on the server where the www is residing or on the server the mail is residing?
Because if all is well, it should be done on the server where mail is residing, and only choose mail as @jamgames2 said, nothing else. So manually request SSL.

 

[tsimtung]

Hi,
I have made all the steps to add ssl for mail.mydomain.com
but when I check the lock, it says:
Verify by : none

It seems my server has some problem on ssl?

 

[tsimtung]

I can run
/usr/local/directadmin/scripts/letsencrypt.sh request hostname.mydomain.com 4096
and the https of hostname.mydomain.com/roundcube/ is working fine.

can I try to run
/usr/local/directadmin/scripts/letsencrypt.sh request mail.mydomain.com 4096
to fix the problem?

 

[Richard G]

/usr/local/directadmin/scripts/letsencrypt.sh request hostname.mydomain.com 4096

That should be request_single by the way in case of the hostname.
However, this command is changed recently to:
/usr/local/directadmin/scripts/letsencrypt.sh server_cert

/usr/local/directadmin/scripts/letsencrypt.sh request mail.mydomain.com 4096

You should be able to yes. But you can also just choose from GUI the manual installation, then choose Letsencrypt and then only select mail.

 

[tsimtung]

I can use the GUI to make add the cert.
however, when I run

https://mail.mydomain.com/roundcube/

it said not secure, and I checked the cert, it seems the cert is for the hostname, myhost.myhostname.com
not mail.mydomain.com

 

[Richard G]

it seems the cert is for the hostname, myhost.myhostname.com

That's because /roundcube is owned by the server, so there the server's SSL should be working.
Seems server got's confused about which SSL certificate to be used, odd issues. Which is exactly why I always advise not to use mail.domain.com for real subdomain or things like that.

So I guess best thing is to either configure your virtual host some way to use https://mail.domain.com for webmail or just use one of these url's (with or without www):

https://www.domain.com/roundcube

https://www.domain.com/webmail

If the 2nd link is not working then add this line to the directadmin.conf file and restart directadmin:
webmail_link=roundcube
and after that:

cd /usr/local/directadmin/custombuild
./build update
./build rewrite_confs

then it should be working.

 

[Ohm J]

I will explain. Webmail hosted by apache/nginx/webserver, so if you want to use ssl, you must add your domain or subdomain to webserver and request SSL

Except, server hostname already manual request SSL by special command and have pointer SSL location. but it's only work with server hostname. No need to added inside webserver.