How to deploy existing SSL certificates

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
Post Reply
theAngryCoder
Posts: 3
Joined: Tue Oct 24, 2017 8:28 pm

How to deploy existing SSL certificates

Post by theAngryCoder »

Hi,

Can somebody guide me on how I can deploy my existing ssl certificate on zimbra. Preferably to all the services including smtp, imap, pop and web interface.

Thanks,
theAngryCoder
User avatar
iodisciple
Posts: 20
Joined: Mon Oct 09, 2017 2:38 pm
Location: Rotterdam
ZCS/ZD Version: Zimbra 8.7.11_GA_1854

Re: How to deploy existing SSL certificates

Post by iodisciple »

I believe it depends a bit on the format the certificates are in, what version of Zimbra you are running and is it a wildcard certificate or does the FQDN of the Zimbra server correspond with the FQDN of the certificate?
theAngryCoder
Posts: 3
Joined: Tue Oct 24, 2017 8:28 pm

Re: How to deploy existing SSL certificates

Post by theAngryCoder »

Hi iodisciple,

This is the output of zmcontrol -v:
Release 8.7.11.GA.1854.UBUNTU16.64 UBUNTU16_64

Yes, it is a wildcard certificate.
User avatar
iodisciple
Posts: 20
Joined: Mon Oct 09, 2017 2:38 pm
Location: Rotterdam
ZCS/ZD Version: Zimbra 8.7.11_GA_1854

Re: How to deploy existing SSL certificates

Post by iodisciple »

Hi,

Then check out this link:
https://wiki.zimbra.com/wiki/Administra ... cate_Tools

And then the steps at the bottom:
Single-Node Wildcard Commercial Certificate

Using a Wildcard Certificate, you will need the next files, because you probably generated the CSR in other server:

The .key file which you generated the CSR.
The .crt file that you SSL provide to you.
The CA Intermediate and the root files merged into one only file, called for example ca_chain.crt
Take it from there.
theAngryCoder
Posts: 3
Joined: Tue Oct 24, 2017 8:28 pm

Re: How to deploy existing SSL certificates

Post by theAngryCoder »

Thank you so much iodisciple! I was able to configure and get my SSL installed! This wouldn't be possible without your help, Thanks again!
User avatar
iodisciple
Posts: 20
Joined: Mon Oct 09, 2017 2:38 pm
Location: Rotterdam
ZCS/ZD Version: Zimbra 8.7.11_GA_1854

Re: How to deploy existing SSL certificates

Post by iodisciple »

Great, you are very welcome :)
mhammett
Advanced member
Advanced member
Posts: 133
Joined: Sat Jul 19, 2014 7:07 am
ZCS/ZD Version: Release 8.6.0.GA.1153.UBUNTU14.64 U

Re: How to deploy existing SSL certificates

Post by mhammett »

That page doesn't say how to get the certificate onto the different services (smtp, imap, pop) the OP asked for.
Post Reply