Installing a StartSSL SSL Certificate with zmcertmgr: Difference between revisions

No edit summary
No edit summary
 
(15 intermediate revisions by 6 users not shown)
Line 1: Line 1:
{{Article Infobox|{{admin}}||{{ZCS 6.0}}|}}== Installing a *Free* StartSSL SSL certificate with zmcertmgr ==
{{BC|Certified}}
__FORCETOC__
<div class="col-md-12 ibox-content">
=Installing a *Free* StartSSL SSL certificate with zmcertmgr=
{{KB|{{ZC}}|{{ZCS 7.0}}|{{ZCS 6.0}}|}}
{{Archive}}{{WIP}}
 
WARNING: There are numerous errors on this page.  Please use the official wiki at http://wiki.zimbra.com/wiki/Administration_Console_and_CLI_Certificate_Tools#ZCS_Certificate_CLI


Use the article as a guide to installing a StartSSL issued SSL certificate with the zmcertmgr tool.   
Use the article as a guide to installing a StartSSL issued SSL certificate with the zmcertmgr tool.   


1. Download the [[http://www.startssl.com/certs/ca.pem]] and [[http://www.startssl.com/certs/sub.class1.server.ca.pem]] to /tmp/
1. Download the ca.pem [http://www.startssl.com/certs/ca.pem] and sub.class1.server.ca.pem [http://www.startssl.com/certs/sub.class1.server.ca.pem] to /tmp/


2. Cat the CA certs to form a single CA certificate chain file
2. Cat the CA certs to form a single CA certificate chain file
   cat ca.pem sub.class1.server.ca.pem > ca_bundle.crt
   cat ca.pem sub.class1.server.ca.pem > ca_bundle.crt


4. Place server certificate in /tmp/ssl.crt.
3. Place server certificate in /tmp/ssl.crt.


5. Place the private key in /opt/zimbra/ssl/zimbra/commercial/ssl.key  
4. Place the private key in /opt/zimbra/ssl/zimbra/commercial/commercial.key  


5. Deploy the commercial certificate with zmcertmgr as the root user.
5. Deploy the commercial certificate with zmcertmgr as the root user.
Line 16: Line 23:
   ./zmcertmgr deploycrt comm /tmp/ssl.crt /tmp/ca_bundle.crt
   ./zmcertmgr deploycrt comm /tmp/ssl.crt /tmp/ca_bundle.crt


6.(As Root User)
/opt/zimbra/java/bin/keytool -import -alias new -keystore /opt/zimbra/java/jre/lib/security/cacerts -storepass changeit -file /opt/zimbra/ssl/zimbra/commercial/commercial.crt
7. Restart the zimbra services
  su zimbra
  zmcontrol stop
  zmcontrol start
See: [[CLI zmtlsctl to set Web Server Mode]] to enable or require web secure connections.
{{Article Footer|Zimbra Collaboration Suite 6.x|7/21/2010}}
{{Article Footer|Zimbra Collaboration Suite 6.x|7/21/2010}}


[[Category: Certificates]]
[[Category: Certificates]]
[[Category: ZCS 6.0]]
[[Category: ZCS 6.0]]

Latest revision as of 09:36, 12 July 2015

Installing a *Free* StartSSL SSL certificate with zmcertmgr

   KB 3671        Last updated on 2015-07-12  




0.00
(0 votes)


WARNING: There are numerous errors on this page. Please use the official wiki at http://wiki.zimbra.com/wiki/Administration_Console_and_CLI_Certificate_Tools#ZCS_Certificate_CLI

Use the article as a guide to installing a StartSSL issued SSL certificate with the zmcertmgr tool.

1. Download the ca.pem [1] and sub.class1.server.ca.pem [2] to /tmp/

2. Cat the CA certs to form a single CA certificate chain file

 cat ca.pem sub.class1.server.ca.pem > ca_bundle.crt

3. Place server certificate in /tmp/ssl.crt.

4. Place the private key in /opt/zimbra/ssl/zimbra/commercial/commercial.key

5. Deploy the commercial certificate with zmcertmgr as the root user.

 cd /opt/zimbra/bin
 ./zmcertmgr deploycrt comm /tmp/ssl.crt /tmp/ca_bundle.crt

6.(As Root User)

/opt/zimbra/java/bin/keytool -import -alias new -keystore /opt/zimbra/java/jre/lib/security/cacerts -storepass changeit -file /opt/zimbra/ssl/zimbra/commercial/commercial.crt

7. Restart the zimbra services

 su zimbra
 zmcontrol stop
 zmcontrol start

See: CLI zmtlsctl to set Web Server Mode to enable or require web secure connections.

Verified Against: Zimbra Collaboration Suite 6.x Date Created: 7/21/2010
Article ID: https://wiki.zimbra.com/index.php?title=Installing_a_StartSSL_SSL_Certificate_with_zmcertmgr Date Modified: 2015-07-12



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »

Jump to: navigation, search