Need help with renewing TLS certificate

[khassen]

Hi,

I urgently need to renew the certificate of a mail server. Cannot open the admin panel nor inbox at the moment.
I took over the corporate email from previous admin, who left no clue as to how he built it up and configured the system. Moreover, I cannot reach him, which is even worse. Unfortunately I dont have much experience in zimbra. its version 8.7.1
From the history of commands, it seemed to be used:

Code: Select all

zmcertmgr deploycrt comm comm.crt commercial_ca.crt
zmcontrol restart

its pity that i cant figure out which keys and certificates have been used or updated, because mc was used.
I ve got several files with their timestamps freshly updated:

• ca.crt
  cert.pem
  chain.pem
  fullchain.pem
  privkey.pem
  comm.crt
  commercial.key
  commercial.crt
  commercial_ca.crt

all of the above files just a few months old, except the last one, which is more than a year old.
i can tell that the certificates need to be updated once in a couple of months or so. The updating the certificate is done locally, so no remote CA was requested. so i need to figure out how to get the right content for the file comm.crt for the command above.
is it even possible? I have looked at some tutorials here:
https://wiki.zimbra.com/wiki/Administra ... cate_Tools
However, the names are completely different and they confuse me.
I dont want to mess the system up completely and reluctant to risk without knowing what i am doing.
Can anyone advise how to solve it? I hope there maybe something obvious for experienced guys here.

[khassen]

The issue is resolved.
Had to figure out about the Letsencrypt API and Certbot stuff
https://www.digitalocean.com/community/ ... requisites

[phoenix]

There's a sticky thread in this forum that provides a less intrusive method of installing certificates: viewforum.php?f=15