Search found 525 matches

by JDunphy
Thu Jun 04, 2020 3:55 pm
Forum: Administrators
Topic: Letsencrypt - Need assistance with http and nginx
Replies: 15
Views: 1891

Re: Letsencrypt - Need assistance with http and nginx

Question: 1. Which certificates was actually used? The ones from ROOT or from ZIMBRA? 2. The ZIIMBRA user now has a crontab entry of: 27 0 * * * "/opt/zimbra/.acme.sh"/acme.sh --cron --home "/opt/zimbra/.acme.sh" > /dev/null is this right? 3. How do you think I will have to rene...
by JDunphy
Wed Jun 03, 2020 3:44 pm
Forum: Administrators
Topic: Letsencrypt - Need assistance with http and nginx
Replies: 15
Views: 1891

Re: Letsencrypt - Need assistance with http and nginx

It always seems difficult the first time. The thing to remember is its 2 steps with acme.sh. You issue your certificates and if you hare happy with the results you can deploy them. It can be done in one step later but think 2 steps the first time you do it. If anything is going to mess up, it will b...
by JDunphy
Wed Jun 03, 2020 3:06 pm
Forum: Administrators
Topic: Letsencrypt - Need assistance with http and nginx
Replies: 15
Views: 1891

Re: Letsencrypt - Need assistance with http and nginx

For completeness, acme.sh has other modes to help with validation that don't require port conflict resolution like --standalone. In some modes, you paste a known string or a file at a location and your webserver or inverse proxy would handle the validation for you. He keeps adding more modes so I wi...
by JDunphy
Wed Jun 03, 2020 2:57 pm
Forum: Administrators
Topic: Letsencrypt - Need assistance with http and nginx
Replies: 15
Views: 1891

Re: Letsencrypt - Need assistance with http and nginx

Basically this is what you would do the first time and acme.sh will handle this automatically in the future. So paste this into your ~/.acme.sh/deploy directory as zimbra.sh #!/bin/bash # Zimbra Assumptions: # 1) acme.sh is installed as Zimbra # 2) see: https://wiki.zimbra.com/wiki/JDunphy-Letsencry...
by JDunphy
Wed Jun 03, 2020 2:39 pm
Forum: Administrators
Topic: Letsencrypt - Need assistance with http and nginx
Replies: 15
Views: 1891

Re: Letsencrypt - Need assistance with http and nginx

A few things... if you want acme.sh to run in standalone you need to stop zimbra's nginx and then run the acme.sh as root which will take about 45 seconds to create and validate that certificate which is not something I like to do. That is why I said, "take an outage" while you are trying ...
by JDunphy
Wed Jun 03, 2020 1:55 pm
Forum: Administrators
Topic: Letsencrypt - Need assistance with http and nginx
Replies: 15
Views: 1891

Re: Letsencrypt - Need assistance with http and nginx

Just a guess but port 80 is below 1024 so you would need to run this as root to listen on port 80. It appears that you are attempting to run acme.sh as zimbra. I use the dns method of validation so I don't need to be root. Once you get the certs validated, you can still use the deploy method we came...
by JDunphy
Tue Jun 02, 2020 7:01 pm
Forum: Administrators
Topic: soap engine trouble
Replies: 2
Views: 439

Re: soap engine trouble

Probably start by fixing the logging...

Ref: https://wiki.zimbra.com/wiki/Log_Files# ... inating_IP

Hint: zimbraMailTrustedIP
by JDunphy
Wed May 13, 2020 7:59 pm
Forum: Administrators
Topic: script completes 100% manually but not when scheduled
Replies: 1
Views: 574

Re: script completes 100% manually but not when scheduled

Could be a few things... try adding this after your #!/bin/bash

Code: Select all

source `dirname $0`/zmshutil || exit 1
zmsetvars

This will setup the environment and is how many other zimbra cron job scripts do it. You can also look in the cron logs for the exact error message.

Jim
by JDunphy
Wed Apr 29, 2020 2:33 am
Forum: Community News
Topic: April 2020 Zeta Alliance Weekly Call Summaries
Replies: 14
Views: 28165

Re: April 2020 Zeta Alliance Weekly Call Summaries

Zimbra Customer Feedback About Zimbra 9’s Open Source Status John W. said he received a letter from a customer expressing their dissatisfaction about the recently announced change in Zimbra’s open source policy, starting with Zimbra 9. John shared the customer’s letter with those on the call. The l...
by JDunphy
Sun Apr 26, 2020 8:18 pm
Forum: Administrators
Topic: Weird web requests from ob163.net
Replies: 1
Views: 2139

Re: Weird web requests from ob163.net

A couple of ways with increasing escalation. Given that ob163.net appears to be running older zimbra server software, you could send email directly in hopes that the admin of that mail server is still reading their email. Old Zimbra versions should/would have been compromised by now if they didn't p...

Go to advanced search