SSL server-side for email?

tone

Member
Oct 20, 2010
16
0
51
Hello,

Is it possible to use SSL for emails, for example when using IMAP have the user's account redirect to mail.hostname.told instead of mail.domainname.tld so that one SSL covers all mail accounts?

I have it set up so /cpanel and /whm redirects to the hostname so SSL is enabled for logins, but just curious about the mail side of things.

Thank you,

Piers
 

24x7server

Well-Known Member
Apr 17, 2013
1,912
99
78
India
cPanel Access Level
Root Administrator
Twitter
You can install SSL on your hostname for the service through WHM >> Service Configuration >> Manage Service SSL Certificates
But if you want to use SSL connection for the mail you will have to use your server hostname instead of mail.domainname.tld

Please check :Manage Service SSL Certificates
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,260
463
Hello :)

SSL certificates for your services such as Exim and POP/IMAP are handled via:

"WHM Home » Service Configuration » Manage Service SSL Certificates"

Typically, you would purchase a certificate for the hostname of the server, install the certificate using the above option for all services, and then advise your customers to use your server's hostname in their email client configuration.

Thank you.
 

tone

Member
Oct 20, 2010
16
0
51
Hello :)

SSL certificates for your services such as Exim and POP/IMAP are handled via:

"WHM Home » Service Configuration » Manage Service SSL Certificates"

Typically, you would purchase a certificate for the hostname of the server, install the certificate using the above option for all services, and then advise your customers to use your server's hostname in their email client configuration.

Thank you.
I have installed and set up a SSL for the cPanel/WHM/Webmail Service and that works (although there is a 1 second screen where it mentions firewall ports before it redirects). It is currently possible to enable, or set, the auto mail settings to use the hostname instead of the domain?

Cheers,

Piers
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,260
463
You should also install the SSL certificate for your other services using that same option. Could you be more specific about which "auto mail settings" you are referring to? For example, are you referring to the automatic email client configuration links in cPanel, or another specific option?

Thank you.
 

tone

Member
Oct 20, 2010
16
0
51
You should also install the SSL certificate for your other services using that same option. Could you be more specific about which "auto mail settings" you are referring to? For example, are you referring to the automatic email client configuration links in cPanel, or another specific option?

Thank you.

Would that require a new SSL certificate? The one I have is for the hostname so I'm assuming the same one for mail should also work.

Sorry, with the "auto mail settings" I mean't autodiscovery used by applications such as Thunderbird etc. Is there an option to set that to use the hostname instead of the user domain.

Cheers,

Piers
 

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,260
463
1. It would not require a new certificate. You could use the same one that you are using for the hostname with cPanel/WHM.

2. You can choose the hostname that is used for the automatic discovery per the documentation at:

WHM - AutoDiscover

This option is available under the "Domains" tab in "WHM Home » Server Configuration » Tweak Settings":

"Host to publish in the SRV records for Outlook autodiscover support."

Thank you.
 

MACscr

Well-Known Member
Sep 30, 2003
198
5
168
cPanel Access Level
Root Administrator
1. It would not require a new certificate. You could use the same one that you are using for the hostname with cPanel/WHM.

2. You can choose the hostname that is used for the automatic discovery per the documentation at:

WHM - AutoDiscover

This option is available under the "Domains" tab in "WHM Home » Server Configuration » Tweak Settings":

"Host to publish in the SRV records for Outlook autodiscover support."

Thank you.
I am running 11.36.1 and I do not see this option under Tweak settings. Right now it does look like its trying to use the servers hostname, but its trying to use some old cert from 2009. All my services are setup to use my wildcard commercial cert and have been working for years now. No idea why autodiscover is picking up something different.
 
Last edited:

cPanelMichael

Administrator
Staff member
Apr 11, 2011
47,880
2,260
463
The feature I mentioned is only available in cPanel version 11.38. This is scheduled to be pushed to the "Release" build tier soon, but there is currently no specific time frame on that. You are welcome to switch to the "Current" build tier to take advantage of this feature, but keep in mind that this tier is not typically recommended for production servers.

Thank you.