[[email protected] ~]$ zmcontrol -v Release 8.6.0_GA_1153.RHEL7_64_20141215151110 RHEL7_64 FOSS edition, Patch 8.6.0_P2. [[email protected] ~]$ /opt/zimbra/bin/zmcertmgr createcsr comm -new -keysize 2048 -subject "/C=ID/ST=Jabar/L=Bandung/O=rgiapratama/OU=IT/CN=mail.rgiapratama.net" -subjectAltNames "mail.rgiapratama.net" [[email protected] ~]$ vi /opt/zimbra/ssl/zimbra/commercial/commercial.csr
Submit commercial.csr to Comodo, after approval process you’ll get email from Comodo with your EssentialSSL Certificate in zip file. After download, upload zip file to your mailserver and extract it.
[[email protected] ~]$ unzip mail_rgiapratama_net.zip [[email protected] ~]$ cat AddTrustExternalCARoot.crt COMODORSAAddTrustCA.crt COMODORSADomainValidationSecureServerCA.crt > ca_chain.crt [[email protected] ~]$ /opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key mail_rgiapratama_net.crt ca_chain.crt ** Verifying /opt/zimbra/mail_rgiapratama_net.crt against /opt/zimbra/ssl/zimbra/commercial/commercial.key Certificate (/opt/zimbra/mail_rgiapratama_net.crt) and private key (/opt/zimbra/ssl/zimbra/commercial/commercial.key) match. Valid Certificate: /opt/zimbra/mail_rgiapratama_net.crt: OK [[email protected] ~]$ /opt/zimbra/bin/zmcertmgr deploycrt comm mail_rgiapratama_net.crt ca_chain.crt [[email protected] ~]$ /opt/zimbra/bin/zmcertmgr viewdeployedcrt [[email protected] ~]$ service zimbra stop [[email protected] ~]$ /opt/zimbra/bin/zmcertmgr addcacert /opt/zimbra/ssl/zimbra/commercial/commercial.crt [[email protected] ~]$ service zimbra start