June 11th, 2015 by Gia
[[email protected] ~]$ zmcontrol -v
Release 8.6.0_GA_1153.RHEL7_64_20141215151110 RHEL7_64 FOSS edition, Patch 8.6.0_P2.
[[email protected] ~]$ /opt/zimbra/bin/zmcertmgr createcsr comm -new -keysize 2048 -subject "/C=ID/ST=Jabar/L=Bandung/O=rgiapratama/OU=IT/CN=mail.rgiapratama.net" -subjectAltNames "mail.rgiapratama.net"
[[email protected] ~]$ vi /opt/zimbra/ssl/zimbra/commercial/commercial.csr

Submit commercial.csr to Comodo, after approval process you’ll get email from Comodo with your EssentialSSL Certificate in zip file. After download, upload zip file to your mailserver and extract it.

[[email protected] ~]$ unzip mail_rgiapratama_net.zip
[[email protected] ~]$ cat AddTrustExternalCARoot.crt COMODORSAAddTrustCA.crt COMODORSADomainValidationSecureServerCA.crt > ca_chain.crt
[[email protected] ~]$ /opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key mail_rgiapratama_net.crt ca_chain.crt
** Verifying /opt/zimbra/mail_rgiapratama_net.crt against /opt/zimbra/ssl/zimbra/commercial/commercial.key
Certificate (/opt/zimbra/mail_rgiapratama_net.crt) and private key (/opt/zimbra/ssl/zimbra/commercial/commercial.key) match.
Valid Certificate: /opt/zimbra/mail_rgiapratama_net.crt: OK
[[email protected] ~]$ /opt/zimbra/bin/zmcertmgr deploycrt comm mail_rgiapratama_net.crt ca_chain.crt
[[email protected] ~]$ /opt/zimbra/bin/zmcertmgr viewdeployedcrt
[[email protected] ~]$ service zimbra stop
[[email protected] ~]$ /opt/zimbra/bin/zmcertmgr addcacert /opt/zimbra/ssl/zimbra/commercial/commercial.crt
[[email protected] ~]$ service zimbra start

Comments

comments

Posted in Zimbra | Comments Off on Comodo EssentialSSL on Zimbra 8.6
Comments are closed.