This shows you the differences between two versions of the page.
Next revision | Previous revision | ||
internet:mail:zimbra:zimbra_ssl_letsencrypt [2022/09/06 12:31] 127.0.0.1 external edit |
internet:mail:zimbra:zimbra_ssl_letsencrypt [2024/03/02 09:25] (current) gcooper |
||
---|---|---|---|
Line 11: | Line 11: | ||
<note tip>Be sure to include all Subject Alternative Hostnames (SANs) that you need on the certificate.</ | <note tip>Be sure to include all Subject Alternative Hostnames (SANs) that you need on the certificate.</ | ||
- | <note warning> | + | <note warning> |
===== Troubleshooting ===== | ===== Troubleshooting ===== | ||
Line 23: | Line 23: | ||
If a certificate renewal fails, try reissuing a new cert instead. | If a certificate renewal fails, try reissuing a new cert instead. | ||
- | ===== Modifications ===== | + | If you get an error " |
- | <note tip> | + | ===== Modifications ===== |
<note tip>You **can** modify the script to support **additional SANs**...</ | <note tip>You **can** modify the script to support **additional SANs**...</ | ||
<note tip> | <note tip> | ||
+ | |||
+ | ==== Renewal ==== | ||
< | < | ||
#!/bin/bash | #!/bin/bash | ||
# | # | ||
- | # Modification to suppress e-mailed | + | # /etc/cron.daily/ |
- | MAILTO="" | + | |
# | # | ||
# Modification for SAN certificate with multiple hostnames | # Modification for SAN certificate with multiple hostnames | ||
# This may/will need to be adjusted for hostnames and possibly cert name | # This may/will need to be adjusted for hostnames and possibly cert name | ||
# If you followed the howto above using just the actual hostname, it will look like this | # If you followed the howto above using just the actual hostname, it will look like this | ||
+ | # | ||
/ | / | ||
# | # | ||
Line 55: | Line 57: | ||
chown zimbra: | chown zimbra: | ||
cd /tmp | cd /tmp | ||
- | su zimbra -c '/ | + | |
+ | su zimbra -c '/ | ||
+ | |||
+ | # Restart Zimbra after deploying cert | ||
+ | su zimbra -c '/ | ||
rm -f "/ | rm -f "/ | ||
</ | </ |