Difference between revisions of "Certificate Management FAQ"

(Created page with '=Summary= Here is a list of frequently asked questions regarding certificate management in ZCS. =FAQ= ==What certificate formats are compatible with ZCS?== Commercial and self-s…')
 
 
(3 intermediate revisions by 2 users not shown)
Line 1: Line 1:
 +
{{BC|Community Sandbox}}
 +
__FORCETOC__
 +
<div class="col-md-12 ibox-content">
 +
=SSL Certificate Management=
 +
{{KB|{{Unsupported}}|{{ZCS 8.0}}|{{ZCS 7.0}}|}}
 +
{{Archive}}{{WIP}}
 
=Summary=
 
=Summary=
 
Here is a list of frequently asked questions regarding certificate management in ZCS.
 
Here is a list of frequently asked questions regarding certificate management in ZCS.
Line 4: Line 10:
 
=FAQ=
 
=FAQ=
 
==What certificate formats are compatible with ZCS?==
 
==What certificate formats are compatible with ZCS?==
Commercial and self-signed certificates must in '''x509/PEM''' form. Other formats will result in error.  
+
Commercial and self-signed certificates must of type '''x509''' and '''PEM''' format. Other formats will result in error.
 +
 
 
==Thawte Certificates==
 
==Thawte Certificates==
 
===Why does uploading the provided ''cert.cer'' file result in certificate/key mismatch?===
 
===Why does uploading the provided ''cert.cer'' file result in certificate/key mismatch?===
Line 22: Line 29:
 
On the Thawte website here: https://www.thawte.com/roots/index.html.
 
On the Thawte website here: https://www.thawte.com/roots/index.html.
 
=More Information=
 
=More Information=
 +
{{Article Footer|Zimbra Collaboration 8.0, 7.0|04/16/2014}}

Latest revision as of 15:19, 11 July 2015

SSL Certificate Management

   KB 3893        Last updated on 2015-07-11  




0.00
(0 votes)

Summary

Here is a list of frequently asked questions regarding certificate management in ZCS.

FAQ

What certificate formats are compatible with ZCS?

Commercial and self-signed certificates must of type x509 and PEM format. Other formats will result in error.

Thawte Certificates

Why does uploading the provided cert.cer file result in certificate/key mismatch?

Thawte has been known to issue their certificates in PKCS7 format. The cert.cer file is actually a certificate bundle containing:

  • your server's certificate
  • CA issuer certificate (intermediate)
  • CA issuse certificate for the (intermediate)

Please note, the PKCS7 bundle does not include the Thawte root CA certificate. Thawte root certificates are located here.

The server and CA intermediate certificates must be extracted from the PKCS7 bundle using the openssl command. This command prints the x509 certificates to a file.

openssl pkcs7 -in cert.cer -print_certs > cert.out

Where can I find Thawte root CA certificates?

On the Thawte website here: https://www.thawte.com/roots/index.html.

More Information

Verified Against: Zimbra Collaboration 8.0, 7.0 Date Created: 04/16/2014
Article ID: https://wiki.zimbra.com/index.php?title=Certificate_Management_FAQ Date Modified: 2015-07-11



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »


Jump to: navigation, search