Differences

This shows you the differences between two versions of the page.

--- internet:mail:zimbra:zimbra_ssl_letsencrypt [2022/09/16 11:48]
gcooper
+++ internet:mail:zimbra:zimbra_ssl_letsencrypt [2024/03/02 09:25] (current)
gcooper
@@ Line 11: / Line 11: @@
 <note tip>Be sure to include all Subject Alternative Hostnames (SANs) that you need on the certificate.</note>
-<note warning>The single-server portion of the howto is fantastic.  However, it only works for the actual hostname and doesn't include any SANs (alternate hostnames) you might need.</note>
+<note warning>The single-server (top) portion of the howto is fantastic.  However, it only works for the actual hostname and doesn't include any SANs (alternate hostnames) you might need.</note>
 ===== Troubleshooting =====
@@ Line 22: / Line 22: @@
 If a certificate renewal fails, try reissuing a new cert instead.
+If you get an error "pkcs12: Unrecognized flag propquery", see: https://community.zextras.com/forum/postid/7321/
 ===== Modifications =====
@@ Line 55: / Line 57: @@
 chown zimbra:zimbra /etc/letsencrypt -R
 cd /tmp
-su zimbra -c '/opt/zimbra/bin/zmcertmgr deploycrt comm "/etc/letsencrypt/live/zimbra3.virtualarchitects.com/cert.pem" "/etc/letsencrypt/live/zimbra.yourdomain.tld/chainZimbra.pem"'
+su zimbra -c '/opt/zimbra/bin/zmcertmgr deploycrt comm "/etc/letsencrypt/live/zimbra.yourdomain.tld/cert.pem" "/etc/letsencrypt/live/zimbra.yourdomain.tld/chainZimbra.pem"'
+# Restart Zimbra after deploying cert
+su zimbra -c '/opt/zimbra/bin/zmcertmgr deploycrt comm "/etc/letsencrypt/live/zimbra.yourdomain.tld/cert.pem" "/etc/letsencrypt/live/zimbra.yourdomain.tld/chainZimbra.pem"' && su zimbra -c '/opt/zimbra/bin/zmcontrol restart'
 rm -f "/etc/letsencrypt/live/zimbra.yourdomain.tld/chainZimbra.pem"
 </file>

Virtual Architects Support Wiki

User Tools

Site Tools

Differences

Page Tools