Matt Pson Just another dead sysadmin blog


Install a SSL certificate on Zimbra 8

The quickest guide ever, follow it at your own risk (your mileage may vary etc.). This is how I did it (IIRC), as root:

# openssl req -nodes -newkey rsa:2048 -keyout server.key -out server.csr


(then off to buy me a SSL certificate from some trustworthy provider ...or, as in my case, one that gives you a great deal. what I go back was 2 files; a certificate (.crt) and a bundle (ca-bundle) to provide a certificate chain for authentication)


# cp server.key /opt/zimbra/ssl/zimbra/commercial/commercial.key
# cp server.crt /opt/zimbra/ssl/zimbra/commercial/commercial.crt
# cp /opt/zimbra/ssl/zimbra/commercial/commercial_ca.crt
# /opt/zimbra/openssl/bin/openssl verify -CAfile commercial_ca.crt commercial.crt

(if the last step fail and give any error message you probably have an incomplete bundle. download a more complete one (you may have to merge the files yourself) from the SSL provider)

# /opt/zimbra/bin/zmcertmgr deploycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.crt /opt/zimbra/ssl/zimbra/commercial/commercial_ca.crt

(this deploys the certificate into Zimbra. Now just restart Zimbra to activate it all across the board)

# su - zimbra
$ zmcontrol stop
$ zmcontrol start


There, done.

Comments (0) Trackbacks (0)

Sorry, the comment form is closed at this time.

Trackbacks are disabled.