Read the article to know more about the mail server SNI DirectAdmin. Bobcares, as a part of our DirectAdmin Support Services offers solutions to every query that comes our way.

Mail Server SNI In DirectAdmin

Server Name Indication is an SSL and TLS extension that tells the hostname the client intends to connect to at the start of the handshaking procedure. This allows the server to provide several certificates, making it feasible to connect multiple websites with SSL security to a single IP address and port (443). SNI eliminates the need for different IP addresses for each SSL-secured page on a web server.

The SNI function in DirectAdmin allows the mail server to support several SSL certificates on a single IP address. When SNI is enabled, each domain can have its own unique SSL certificate for secure email communication, increasing security and allowing interoperability with various mail clients that require SNI support.

Using SNI in DirectAdmin’s mail server configuration guarantees that each domain’s SSL certificate is correctly presented when establishing encrypted connections, resulting in a seamless and secure mail experience for users from several domains on the same server.

DirectAdmin has supported SNI since version 1.36.1, but only when using SNI-compatible versions of OpenSSL and Apache. We must add or edit the following line to the configuration file /usr/local/directadmin/conf/directadmin.conf.

The default setting is enable_ssl_sni=0. When there are multiple certificates installed on one IP address to be used, change the setting to enable_ssl_sni=1.

When certificates are added, turning on SNI eliminates the check to see if the user has a dedicated IP address. Even if a user has multiple IP addresses in the file user_ip.list, SSL verification for the root domain is disabled. This is due to the fact that a user may own more than one IP address. When the main domain is the only domain under this user account, forcing SSL would be pointless.

[Want to learn more? Reach out to us if you have any further questions.]

Conclusion

The SNI function in DirectAdmin enables the mail server to support several SSL certificates on a single IP address.