Installing a StartSSL SSL Certificate with zmcertmgr
Article Information |
---|
This article applies to the following ZCS versions. |
Installing a *Free* StartSSL SSL certificate with zmcertmgr
Use the article as a guide to installing a StartSSL issued SSL certificate with the zmcertmgr tool.
1. Download the ca.pem [1] and sub.class1.server.ca.pem [2] to /tmp/
2. Cat the CA certs to form a single CA certificate chain file
cat ca.pem sub.class1.server.ca.pem > ca_bundle.crt
3. Place server certificate in /tmp/ssl.crt.
4. Place the private key in /opt/zimbra/ssl/zimbra/commercial/ssl.key
5. Deploy the commercial certificate with zmcertmgr as the root user.
cd /opt/zimbra/bin ./zmcertmgr deploycrt comm /tmp/ssl.crt /tmp/ca_bundle.crt