Some hint about ssl certificate and data recovery

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
TitusI
Posts: 30
Joined: Fri Apr 15, 2016 2:54 pm
ZCS/ZD Version: Release 8.7.11_GA_1854.RHEL7_64_201

Some hint about ssl certificate and data recovery

Post by TitusI »

Hi,
after a defacement we migrate our zimbra mail server to the latest verzion 8.8.12_GA_3803FOSS,
now we face some problem.
ONE
correct management of domain and certificates:
our server is servesX.domain1.ex ip 1.1.1.1
we have 5 domain configurated
domain1.ex
domain2.ex
domain3.ex
domain4.ex
domain5.ex

Users of the domain 3 want to use gmail via web to syncronize their account, but google
refuse to connect to our server becouse we have a self signed certificate (I oresume)

Now what kind of certificate do we need?
a certificate for servesX.domain1.ex?
or a certificate for domain3.ex?

The domain are configured in this way

every domain ha a A record named mail pointing at the ip of the server 1.1.1.1
and a MX record pointing to mail.domain[1...5].es

Any suggestion is really appreciated.

TWO
We left behind us a lot of email (we need to go up asap...) now the new mail server has some day of email
but on the old one there are some years of email..., we have tried to use the external domain configuration in
zimbra web client but it refuses to connect, a problem of encription/certificate, can we solve the problem
installing a certificate on the old server (serverY.domain1.ex)?

We can't access the ajax web client on the old server, only html works there is a way to export contacts?
the link generated refer to the domain, and the domain point on the new server inserting the ip does not work. :cry:

Can some expert suggest a set of step to go out of this troubled water?

Thank you in advance.
MaySky
Posts: 25
Joined: Sat Apr 02, 2016 6:57 am

Re: Some hint about ssl certificate and data recovery

Post by MaySky »

TitusI wrote:Hi,
after a defacement we migrate our zimbra mail server to the latest verzion 8.8.12_GA_3803FOSS,
now we face some problem.
ONE
correct management of domain and certificates:
our server is servesX.domain1.ex ip 1.1.1.1
we have 5 domain configurated
domain1.ex
domain2.ex
domain3.ex
domain4.ex
domain5.ex

Users of the domain 3 want to use gmail via web to syncronize their account, but google
refuse to connect to our server becouse we have a self signed certificate (I oresume)

Now what kind of certificate do we need?
a certificate for servesX.domain1.ex?
or a certificate for domain3.ex?

The domain are configured in this way

every domain ha a A record named mail pointing at the ip of the server 1.1.1.1
and a MX record pointing to mail.domain[1...5].es

Any suggestion is really appreciated.

TWO
We left behind us a lot of email (we need to go up asap...) now the new mail server has some day of email
but on the old one there are some years of email..., we have tried to use the external domain configuration in
zimbra web client but it refuses to connect, a problem of encription/certificate, can we solve the problem
installing a certificate on the old server (serverY.domain1.ex)?

We can't access the ajax web client on the old server, only html works there is a way to export contacts?
the link generated refer to the domain, and the domain point on the new server inserting the ip does not work. :cry:

Can some expert suggest a set of step to go out of this troubled water?

Thank you in advance.
Hello.

You need certificate for your FQDN of the server (e.g. Let's Encrypt)
All the mx records of the domains should be servesX.domain1.ex not mail1,2,3...
The best rule is to have 1 mx record with IP in A record for it and PTR record for this IP as your MX record.
MX record for all other domains should be the same.
In other words you have serv1.com, serv2.com,....
You need some MX mail.serv1.com or any other.
MX record for serv2.com should be mail.serv1.com
Post Reply