Possible to Automatically Load SSL Certificates from Files?

May 13 (21 days ago)

Paul Engst wrote

I have a question regarding SSL certificate automation with VPOP3 and Let's Encrypt.

I understand the challenges around integrated ACME support and port handling from the VPOP3 perspective. For my setup, I already use Win-Acme externally, which handles certificate renewal automatically without any problems.

The only manual step left is importing or pasting the renewed certificates into the VPOP3 web administration interface each time they change.

Am I overlooking an existing feature that allows VPOP3 to automatically load certificates from certificate/key files on disk?

Or are there any recommended solutions or workflows other users are using for this?

It seems that simply allowing VPOP3 to read updated certificate files directly could already provide a very practical intermediate solution without requiring full built-in Let's Encrypt support.

Greetings
Paul

1 Answer

May 13 (21 days ago)

Paul Smith agent wrote

Hi Paul,

> The only manual step left is importing or pasting the renewed certificates into the VPOP3 web administration interface each time they change.
>
> Am I overlooking an existing feature that allows VPOP3 to automatically load certificates from certificate/key files on disk?

It can't *automatically* load certificates from files on disk, but (if you have a recent version of VPOP3) you can use the 'vpop3settings' program to update them from a batch file/script (eg maybe as a trigger command from 'Win-Acme' or as part of the script which runs Win-Acme)

Eg, if you run the following commands it will do it:

vpop3settings setfromfile sslpkey
vpop3settings setfromfile sslcert
vpop3settings set sslreload 1

We can't add LetsEncrypt support into VPOP3 directly because there are too many variables (eg LetsEncrypt requires a public web server on ports 80 and 443, or integration with a DNS server). Many people don't have VPOP3 publicly accessible on port 80, and there are too many options for DNS integration.

We have got an experimental script using Posh-ACME with the latest version of VPOP3 if you have VPOP3's Webmail available on port 80/443, but if you have Win-Acme working correctly for you, all you need extra is the three 'vpop3settings' commands above

I hope this helps

Regards

Paul