Difference between revisions of "Zimbra tls certificates"
Jump to navigation
Jump to search
| (6 intermediate revisions by the same user not shown) | |||
| Line 1: | Line 1: | ||
| + | ## Error | ||
| + | ``` | ||
| + | Starting ldap...Done. | ||
| + | Unable to start TLS: SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed when connecting to ldap master. | ||
| + | ``` | ||
| + | |||
Include on certbot might be needed | Include on certbot might be needed | ||
- https://wiki.zimbra.com/wiki/Installing_a_LetsEncrypt_SSL_Certificate | - https://wiki.zimbra.com/wiki/Installing_a_LetsEncrypt_SSL_Certificate | ||
| Line 8: | Line 14: | ||
- commercial.key | - commercial.key | ||
- commerical.chain.pem | - commerical.chain.pem | ||
| + | - Not sure if you can use full chain | ||
``` | ``` | ||
| + | #!/bin/bash | ||
| + | set -eu | ||
cp * /opt/zimbra/ssl/zimbra/commercial/ | cp * /opt/zimbra/ssl/zimbra/commercial/ | ||
| − | + | wget -O /tmp/ISRG-X1.pem https://letsencrypt.org/certs/isrgrootx1.pem.txt | |
| − | cat /tmp/ISRG-X1.pem >> /opt/zimbra/ssl/zimbra/commercial/ | + | cat /tmp/ISRG-X1.pem >> /opt/zimbra/ssl/zimbra/commercial/commercial.chain.pem |
| − | /opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key /opt/zimbra/ssl/zimbra/commercial/commercial.crt /opt/zimbra/ssl/zimbra/commercial/ | + | sudo -H -u zimbra bash -c "/opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key /opt/zimbra/ssl/zimbra/commercial/commercial.crt /opt/zimbra/ssl/zimbra/commercial/commercial.chain.pem" |
| − | /opt/zimbra/bin/zmcertmgr deploycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.crt /opt/zimbra/ssl/zimbra/commercial/ | + | sudo -H -u zimbra bash -c "cd /opt/zimbra && /opt/zimbra/bin/zmcertmgr deploycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.crt /opt/zimbra/ssl/zimbra/commercial/commercial.chain.pem" |
| − | + | sudo -H -u zimbra bash -c "/opt/zimbra/bin/zmcontrol restart" | |
| − | zmcontrol restart | ||
| − | |||
``` | ``` | ||
Latest revision as of 04:18, 24 December 2024
Error
Starting ldap...Done. Unable to start TLS: SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed when connecting to ldap master.
Include on certbot might be needed - https://wiki.zimbra.com/wiki/Installing_a_LetsEncrypt_SSL_Certificate
--preferred-chain "ISRG Root X1" --force-renewal
- commercial.crt
- commercial.key
- commerical.chain.pem
- Not sure if you can use full chain
#!/bin/bash set -eu cp * /opt/zimbra/ssl/zimbra/commercial/ wget -O /tmp/ISRG-X1.pem https://letsencrypt.org/certs/isrgrootx1.pem.txt cat /tmp/ISRG-X1.pem >> /opt/zimbra/ssl/zimbra/commercial/commercial.chain.pem sudo -H -u zimbra bash -c "/opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key /opt/zimbra/ssl/zimbra/commercial/commercial.crt /opt/zimbra/ssl/zimbra/commercial/commercial.chain.pem" sudo -H -u zimbra bash -c "cd /opt/zimbra && /opt/zimbra/bin/zmcertmgr deploycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.crt /opt/zimbra/ssl/zimbra/commercial/commercial.chain.pem" sudo -H -u zimbra bash -c "/opt/zimbra/bin/zmcontrol restart"