Notepad:Zimbra Zimbra Let's encrypt - Revision history

Lax: /* ==* NEW ==* */ Getting correct ROOT X1 pem

2025-03-08T21:38:34Z

*=*=* NEW *=*=*: Getting correct ROOT X1 pem

← Older revision		Revision as of 21:38, 8 March 2025
Line 27:		Line 27:

	You have to add the isrgrootx1.pem to chain.		You have to add the isrgrootx1.pem to chain.

			https://letsencrypt.org/certs/isrgrootx1.pem

Lax: /* ==* NEW ==* */

2025-03-08T21:36:30Z

*=*=* NEW *=*=*

← Older revision		Revision as of 21:36, 8 March 2025
Line 24:		Line 24:

	===* NEW ==*=		===* NEW ==*=
			'''2025'''

			You have to add the isrgrootx1.pem to chain.


	Have a copy called ```chain.pem.working``` that should be used (copy to ```chain.pem```)		Have a copy called ```chain.pem.working``` that should be used (copy to ```chain.pem```)

Lax: /* Zimbra renew let'sencrypt */

2022-02-09T00:26:14Z

Zimbra renew let'sencrypt

← Older revision		Revision as of 00:26, 9 February 2022
Line 22:		Line 22:
	cp /etc/letsencrypt/live/{YourSSLDomain}/* .		cp /etc/letsencrypt/live/{YourSSLDomain}/* .
	chown zimbra:zimbra /opt/zimbra/ssl/letsencrypt/*		chown zimbra:zimbra /opt/zimbra/ssl/letsencrypt/*

			===* NEW ==*=
			Have a copy called ```chain.pem.working``` that should be used (copy to ```chain.pem```)

	Add X3 root certificate to our chain.pem		Add X3 root certificate to our chain.pem

Lax: /* Zimbra renew let'sencrypt */

2021-12-07T02:17:11Z

Zimbra renew let'sencrypt

@@ Line 46: / Line 46: @@
   JDGFoqgCWjBH4d1QB7wCCZAA62RjYJsWvIjJEubSfZGL+T0yjWW06XyxV3bqxbYo
   Ob8VZRzI9neWagqNdwvYkQsEjgfbKbYK7p2CNTUQ
   -----END CERTIFICATE-----

Lax: /* Zimbra renew let'sencrypt */

2018-10-10T18:54:34Z

Zimbra renew let'sencrypt

← Older revision		Revision as of 18:54, 10 October 2018
Line 1:		Line 1:
	= Zimbra renew let'sencrypt =		= Zimbra renew let'sencrypt =

			From : [https://gist.github.com/ugurerkan/6e9e3addf9a574ad0c57039164570e6f Zimbra Letsencrypt SSL Renew]

	su zimbra		su zimbra

Lax: Created page with "= Zimbra renew let'sencrypt = su zimbra zmproxyctl stop zmmailboxdctl stop Then return root user and renew Letsencrypt certificate exit certbot renew Change directory..."

2018-10-10T18:54:00Z

Created page with "= Zimbra renew let'sencrypt = su zimbra zmproxyctl stop zmmailboxdctl stop Then return root user and renew Letsencrypt certificate exit certbot renew Change directory..."

New page

= Zimbra renew let'sencrypt =

su zimbra
zmproxyctl stop
zmmailboxdctl stop

Then return root user and renew Letsencrypt certificate

exit
certbot renew

Change directory to Zimbra Letsecnrpyt SSL folder

cd /opt/zimbra/ssl/letsencrypt/

Copy new SSL files to Zimbra Letsencrypt folder then change owner to Zimbra.

At this point change {YourSSLDomain} to your domain which is we are working on.

cp /etc/letsencrypt/live/{YourSSLDomain}/* .
chown zimbra:zimbra /opt/zimbra/ssl/letsencrypt/*

Add X3 root certificate to our chain.pem

nano /opt/zimbra/ssl/letsencrypt/chain.pem

-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Now let's check our certificates are verified via Zimbra certificate manager

/opt/zimbra/bin/zmcertmgr verifycrt comm privkey.pem cert.pem chain.pem

If you see done message in your console, first make a backup of course...

cp -a /opt/zimbra/ssl/zimbra /opt/zimbra/ssl/zimbra.$(date "+%Y%m%d")

cp /opt/zimbra/ssl/letsencrypt/privkey.pem /opt/zimbra/ssl/zimbra/commercial/commercial.key

Soooo, we are ready to deploy new certificates, run deploycrt command via zmcertmgr.

/opt/zimbra/bin/zmcertmgr deploycrt comm cert.pem chain.pem

at last, here is a happy restart.

su zimbra
zmcontrol restart

Notepad:Zimbra Zimbra Let's encrypt - Revision history

Lax: /* *=*=* NEW *=*=* */ Getting correct ROOT X1 pem

Lax: /* *=*=* NEW *=*=* */

Lax: /* Zimbra renew let'sencrypt */

Lax: /* Zimbra renew let'sencrypt */

Lax: /* Zimbra renew let'sencrypt */

Lax: Created page with "= Zimbra renew let'sencrypt = su zimbra zmproxyctl stop zmmailboxdctl stop Then return root user and renew Letsencrypt certificate exit certbot renew Change directory..."

Lax: /* ==* NEW ==* */ Getting correct ROOT X1 pem

Lax: /* ==* NEW ==* */