mail server

Install SSL di Zimbra Server

Sysadmin
bees

Requirements

  • Zimbra server
  • SSL yang sudah aktif
  • setting SSL menggunakan user┬ázimbra

Install Active SSL di Zimbra Server

Prepare

su - zimbra
zimbra@mail:~$ pwd
/opt/zimbra/
zimbra@mail:~$ mkdir ssl/domain
zimbra@mail:~$ cd ssl/domain

Create required SSL files (crt, ca-bundle, key)

zimbra@mail:~/ssl/domain$ cat <<EOF >> mail_sysadmin_id.crt
> -----BEGIN CERTIFICATE-----
> -----END CERTIFICATE-----
> EOF

zimbra@mail:~/ssl/domain$ cat <<EOF >> mail_sysadmin_id.ca-bundle
> -----BEGIN CERTIFICATE-----
> -----END CERTIFICATE-----
> -----BEGIN CERTIFICATE-----
> -----END CERTIFICATE-----
> EOF

zimbra@mail:~/ssl/domain$ mv /opt/zimbra/ssl/zimbra/commercial/commercial.key{,.orig}
zimbra@mail:~/ssl/domain$ cat <<EOF >> /opt/zimbra/ssl/zimbra/commercial/commercial.key
> -----BEGIN PRIVATE KEY-----
> -----END PRIVATE KEY-----
> EOF

Verifying SSL

zimbra@mail:~/ssl/domain$ /opt/zimbra/bin/zmcertmgr verifycrt comm \
> /opt/zimbra/ssl/zimbra/commercial/commercial.key \
> /opt/zimbra/ssl/domain/mail_sysadmin_id.crt \
> /opt/zimbra/ssl/domain/mail_sysadmin_id.ca-bundle

Deploy SSL

zimbra@mail:~/ssl/domain$ /opt/zimbra/bin/zmcertmgr deploycrt comm \
> /opt/zimbra/ssl/2019/mail_sysadmin_id.crt \
> /opt/zimbra/ssl/2019/mail_sysadmin_id.ca-bundle

Viewing deploy SSL

zimbra@mail:~/ssl/domain$ /opt/zimbra/bin/zmcertmgr viewdeployedcrt

Restart Zimbra

zimbra@mail:~/ssl/domain$ zmcontrol restart