Multiple SSL Virtual Hosts 6.0

Revision as of 21:07, 20 January 2011 by Useopenid (talk | contribs) (Starting Point)

Admin Article

Article Information

This article applies to the following ZCS versions.

ZCS 6.0 Article ZCS 6.0



It may be required to provide SSL connections to the mail server for more than one virtual host. This is problematic, as TLS/SNI is not yet widely deployed. This documents one way to implement multiple server names with SSL for POP, IMAP, SMTP and Webmail services, and assumes you're familiar with SSL certificates and basic zimbra installation.

Starting Point

The starting point for this configuration is a standard zimbra installation with proxy enabled. While this is intended for a scaleable, multiserver, installation, it can be used in a single server instance as well. Doing so simplifies configuration in that you only need to configure nginx and postfix to cover all the services. Make sure your basic system is operational before continuing! I have been unable to find documentation on the local configuration management setup in 6.0, and had to resort to a hack of using permissions to keep zimbra from overwriting some of the changes on startup. That does not affect normal operation, but may prevent some of the initial setup from working properly.

nginx (pop, imap, https)

postfix (smtp)

Keywords: ssl , virtual hosts, proxy

Verified Against: ZCS 6.0.x Date Created: 1/20/2011
Article ID: Date Modified: 2011-01-20

Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »

Jump to: navigation, search