Differences

This shows you the differences between two versions of the page.

--- internet:mail:zimbra:zimbra_ssl_letsencrypt [2023/01/10 13:23]
gcooper
+++ internet:mail:zimbra:zimbra_ssl_letsencrypt [2024/03/02 09:25] (current)
gcooper
@@ Line 22: / Line 22: @@
 If a certificate renewal fails, try reissuing a new cert instead.
+If you get an error "pkcs12: Unrecognized flag propquery", see: https://community.zextras.com/forum/postid/7321/
 ===== Modifications =====
@@ Line 55: / Line 57: @@
 chown zimbra:zimbra /etc/letsencrypt -R
 cd /tmp
-su zimbra -c '/opt/zimbra/bin/zmcertmgr deploycrt comm "/etc/letsencrypt/live/zimbra3.virtualarchitects.com/cert.pem" "/etc/letsencrypt/live/zimbra.yourdomain.tld/chainZimbra.pem"'
+su zimbra -c '/opt/zimbra/bin/zmcertmgr deploycrt comm "/etc/letsencrypt/live/zimbra.yourdomain.tld/cert.pem" "/etc/letsencrypt/live/zimbra.yourdomain.tld/chainZimbra.pem"'
+# Restart Zimbra after deploying cert
+su zimbra -c '/opt/zimbra/bin/zmcertmgr deploycrt comm "/etc/letsencrypt/live/zimbra.yourdomain.tld/cert.pem" "/etc/letsencrypt/live/zimbra.yourdomain.tld/chainZimbra.pem"' && su zimbra -c '/opt/zimbra/bin/zmcontrol restart'
 rm -f "/etc/letsencrypt/live/zimbra.yourdomain.tld/chainZimbra.pem"
-su zimbra -c '/opt/zimbra/bin/zmcontrol restart'
 </file>

Virtual Architects Support Wiki