Regenerate Self-Signed SSL Certificate - Single-Server
Regenerate Self-Signed SSL Certificate - Single-Server
Purpose
Regenerate the SSL certificate in a Zimbra single server environment. Run the commands below as the user zimbra.
Resolution
1. Begin by generating a new Certificate Authority (CA).
This step is optional and not required everytime you renew the self signed certificate.
/opt/zimbra/bin/zmcertmgr createca -new /opt/zimbra/bin/zmcertmgr deployca
2. Then generate a certificate signed by the CA that expires in 365 days with either wildcard or subject altnames.
/opt/zimbra/bin/zmcertmgr createcrt -new -days 365
3. Next, deploy the certificate.
/opt/zimbra/bin/zmcertmgr deploycrt self
4. To finish, verify the certificate was deployed.
/opt/zimbra/bin/zmcertmgr viewdeployedcrt
5. Restart zmcontrol to take the changes in effect. zmcontrol restart
Additional Content
- Link to a extended Wiki article.