Installing a RapidSSL Commercial Certificate
Installing a RapidSSL Commercial Certificate
Purpose
Step by Step Wiki/KB article to install a RapidSSL Commercial Certificate
Resolution
When you buy a GeoTrust (RapidSSL)SSL certificate, Geotrust will send to you some Root Certificate and RapidSSL intermediate CA certificate, in case that you miss some of them, here are the links:
- GeoTrust Root Certificates - https://www.geotrust.com/resources/root-certificates/
- Root 2 - GeoTrust Global CA (.pem format) - https://www.geotrust.com/resources/root_certificates/certificates/GeoTrust_Global_CA.pem
- RapidSSL Intermediate CA Certificates - https://knowledge.rapidssl.com/support/ssl-certificate-support/index?page=content&actp=CROSSLINK&id=SO26459
Preparing the commercial_ca.crt
Certificates were assembled as follows:
cat [RapidSSL intermediate CA] [GeoTrust Global CA] > commercial_ca.crt
You will be able to successfully verify the certificate using the following:
/opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key mail-cert ./commercial_ca.crt
Where 'mail-cert' is the certificate that was issued to the server based on the CSR, and "commercial_ca.crt" is the bundle assembled from the RapidSSL intermediate CA certificate and the link above.
Deploy the new SSL RapidSSL certificate
Then deploy the certificate as follows:
/opt/zimbra/bin/zmcertmgr deploycrt comm mail-cert ./commercial_ca.crt
Then you need to restart the services
zmcontrol restart
Additional Content
- No related content