Difference between revisions of "Zimbra tls certificates"
Jump to navigation
Jump to search
| Line 14: | Line 14: | ||
wget -O /tmp/ISRG-X1.pem https://letsencrypt.org/certs/isrgrootx1.pem.txt | wget -O /tmp/ISRG-X1.pem https://letsencrypt.org/certs/isrgrootx1.pem.txt | ||
cat /tmp/ISRG-X1.pem >> /opt/zimbra/ssl/zimbra/commercial/commerical.chain.pem | cat /tmp/ISRG-X1.pem >> /opt/zimbra/ssl/zimbra/commercial/commerical.chain.pem | ||
| − | /opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key /opt/zimbra/ssl/zimbra/commercial/commercial.crt /opt/zimbra/ssl/zimbra/commercial/ | + | /opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key /opt/zimbra/ssl/zimbra/commercial/commercial.crt /opt/zimbra/ssl/zimbra/commercial/commercial.chain.pem |
| − | /opt/zimbra/bin/zmcertmgr deploycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.crt /opt/zimbra/ssl/zimbra/commercial/ | + | /opt/zimbra/bin/zmcertmgr deploycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.crt /opt/zimbra/ssl/zimbra/commercial/commercial.chain.pem |
zmcontrol restart | zmcontrol restart | ||
``` | ``` | ||
Revision as of 19:59, 26 May 2024
Include on certbot might be needed - https://wiki.zimbra.com/wiki/Installing_a_LetsEncrypt_SSL_Certificate
--preferred-chain "ISRG Root X1" --force-renewal
- commercial.crt
- commercial.key
- commerical.chain.pem
- Not sure if you can use full chain
cp * /opt/zimbra/ssl/zimbra/commercial/ wget -O /tmp/ISRG-X1.pem https://letsencrypt.org/certs/isrgrootx1.pem.txt cat /tmp/ISRG-X1.pem >> /opt/zimbra/ssl/zimbra/commercial/commerical.chain.pem /opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key /opt/zimbra/ssl/zimbra/commercial/commercial.crt /opt/zimbra/ssl/zimbra/commercial/commercial.chain.pem /opt/zimbra/bin/zmcertmgr deploycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.crt /opt/zimbra/ssl/zimbra/commercial/commercial.chain.pem zmcontrol restart