Let's Encrypt Certificate Issue deployment Issue at Pahwa - Revision history

Biswajit at 17:40, 20 January 2024

2024-01-20T17:40:16Z

← Older revision		Revision as of 17:40, 20 January 2024
Line 26:		Line 26:
	cd /tmp/		cd /tmp/

	~~Append following on~~ fullchain.cer ~~( https://wiki~~.~~zimbra.com/wiki/Installing_a_LetsEncrypt_SSL_Certificate )~~		Delete fullchain.cer and create new fullchain.cer as shown below
	-----BEGIN CERTIFICATE-----		-----BEGIN CERTIFICATE-----
	~~MIIDSjCCAjKgAwIBAgIQRK~~+~~wgNajJ7qJMDmGLvhAazANBgkqhkiG9w0BAQUFADA~~/		MIIFazCCA1OgAwIBAgIRAIIQz7DSQONZRGPgu2OCiwAwDQYJKoZIhvcNAQELBQAw
	~~MSQwIgYDVQQKExtEaWdpdGFsIFNpZ25hdHVyZSBUcnVzdCBDby4xFzAVBgNVBAMT~~		TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
	~~DkRTVCBSb290IENBIFgzMB4XDTAwMDkzMDIxMTIxOVoXDTIxMDkzMDE0MDExNVow~~		cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMTUwNjA0MTEwNDM4
	~~PzEkMCIGA1UEChMbRGlnaXRhbCBTaWduYXR1cmUgVHJ1c3QgQ28uMRcwFQYDVQQD~~		WhcNMzUwNjA0MTEwNDM4WjBPMQswCQYDVQQGEwJVUzEpMCcGA1UEChMgSW50ZXJu
	~~Ew5EU1QgUm9vdCBDQSBYMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEB~~		ZXQgU2VjdXJpdHkgUmVzZWFyY2ggR3JvdXAxFTATBgNVBAMTDElTUkcgUm9vdCBY
	AN+~~v6ZdQCINXtMxiZfaQguzH0yxrMMpb7NnDfcdAwRgUi~~+~~DoM3ZJKuM~~/~~IUmTrE4O~~		MTCCAiIwDQYJKoZIhvcNAQEBBQADggIPADCCAgoCggIBAK3oJHP0FDfzm54rVygc
	~~rz5Iy2Xu~~/~~NMhD2XSKtkyj4zl93ewEnu1lcCJo6m67XMuegwGMoOifooUMM0RoOEq~~		h77ct984kIxuPOZXoHj3dcKi/vVqbvYATyjb3miGbESTtrFj/RQSa78f0uoxmyF+
	~~OLl5CjH9UL2AZd~~+~~3UWODyOKIYepLYYHsUmu5ouJLGiifSKOeDNoJjj4XLh7dIN9b~~		0TM8ukj13Xnfs7j/EvEhmkvBioZxaUpmZmyPfjxwv60pIgbz5MDmgK7iS4+3mX6U
	~~xiqKqy69cK3FCxolkHRyxXtqqzTWMIn~~/~~5WgTe1QLyNau7Fqckh49ZLOMxt~~+/~~yUFw~~		A5/TR5d8mUgjU+g4rk8Kb4Mu0UlXjIB0ttov0DiNewNwIRt18jA8+o+u3dpjq+sW
	~~7BZy1SbsOFU5Q9D8~~/~~RhcQPGX69Wam40dutolucbY38EVAjqr2m7xPi71XAicPNaD~~		T8KOEUt+zwvo/7V3LvSye0rgTBIlDHCNAymg4VMk7BPZ7hm/ELNKjD+Jo2FR3qyH
	~~aeQQmxkqtilX4~~+~~U9m5~~/~~wAl0CAwEAAaNCMEAwDwYDVR0TAQH~~/~~BAUwAwEB~~/~~zAOBgNV~~		B5T0Y3HsLuJvW5iB4YlcNHlsdu87kGJ55tukmi8mxdAQ4Q7e2RCOFvu396j3x+UC
	~~HQ8BAf8EBAMCAQYwHQYDVR0OBBYEFMSnsaR7LHH62~~+~~FLkHX~~/~~xBVghYkQMA0GCSqG~~		B5iPNgiV5+I3lg02dZ77DnKxHZu8A/lJBdiB3QW0KtZB6awBdpUKD9jf1b0SHzUv
	~~SIb3DQEBBQUAA4IBAQCjGiybFwBcqR7uKGY3Or~~+~~Dxz9LwwmglSBd49lZRNI~~+~~DT69~~		KBds0pjBqAlkd25HN7rOrFleaJ1/ctaJxQZBKT5ZPt0m9STJEadao0xAH0ahmbWn
	~~ikugdB~~/~~OEIKcdBodfpga3csTS7MgROSR6cz8faXbauX~~+~~5v3gTt23ADq1cEmv8uXr~~		OlFuhjuefXKnEgV4We0+UXgVCwOPjdAvBbI+e0ocS3MFEvzG6uBQE3xDk3SzynTn
	~~AvHRAosZy5Q6XkjEGB5YGV8eAlrwDPGxrancWYaLbumR9YbK~~+~~rlmM6pZW87ipxZz~~		jh8BCNAw1FtxNrQHusEwMFxIt4I7mKZ9YIqioymCzLq9gwQbooMDQaHWBfEbwrbw
	~~R8srzJmwN0jP41ZL9c8PDHIyh8bwRLtTcm1D9SZImlJnt1ir~~/~~md2cXjbDaJWFBM5~~		qHyGO0aoSCqI3Haadr8faqU9GY/rOPNk3sgrDQoo//fb4hVC1CLQJ13hef4Y53CI
	~~JDGFoqgCWjBH4d1QB7wCCZAA62RjYJsWvIjJEubSfZGL~~+~~T0yjWW06XyxV3bqxbYo~~		rU7m2Ys6xt0nUW7/vGT1M0NPAgMBAAGjQjBAMA4GA1UdDwEB/wQEAwIBBjAPBgNV
	~~Ob8VZRzI9neWagqNdwvYkQsEjgfbKbYK7p2CNTUQ~~		HRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5tFnme7bl5AFzgAiIyBpY9umbbjANBgkq
			hkiG9w0BAQsFAAOCAgEAVR9YqbyyqFDQDLHYGmkgJykIrGF1XIpu+ILlaS/V9lZL
			ubhzEFnTIZd+50xx+7LSYK05qAvqFyFWhfFQDlnrzuBZ6brJFe+GnY+EgPbk6ZGQ
			3BebYhtF8GaV0nxvwuo77x/Py9auJ/GpsMiu/X1+mvoiBOv/2X/qkSsisRcOj/KK
			NFtY2PwByVS5uCbMiogziUwthDyC3+6WVwW6LLv3xLfHTjuCvjHIInNzktHCgKQ5
			ORAzI4JMPJ+GslWYHb4phowim57iaztXOoJwTdwJx4nLCgdNbOhdjsnvzqvHu7Ur
			TkXWStAmzOVyyghqpZXjFaH3pO3JLF+l+/+sKAIuvtd7u+Nxe5AW0wdeRlN8NwdC
			jNPElpzVmbUq4JUagEiuTDkHzsxHpFKVK7q4+63SM1N95R1NbdWhscdCb+ZAJzVc
			oyi3B43njTOQ5yOf+1CceWxG1bQVs5ZufpsMljq4Ui0/1lvh+wjChP4kqKOJ2qxq
			4RgqsahDYVvTH9w7jXbyLeiNdd8XM2w9U/t7y0Ff/9yi0GE44Za4rF2LN9d11TPA
			mRGunUHBcnWEvgJBQl9nJEiU0Zsnvgc/ubhPgXRR4Xq37Z0j4r7g1SgEEzwxA57d
			emyPxgcYxn/eR44/KJ4EBs+lVDR3veyJm+kXQ99b21/+jh5Xos1AnX5iItreGCc=
			-----END CERTIFICATE-----
			-----BEGIN CERTIFICATE-----
			MIIFFjCCAv6gAwIBAgIRAJErCErPDBinU/bWLiWnX1owDQYJKoZIhvcNAQELBQAw
			TzELMAkGA1UEBhMCVVMxKTAnBgNVBAoTIEludGVybmV0IFNlY3VyaXR5IFJlc2Vh
			cmNoIEdyb3VwMRUwEwYDVQQDEwxJU1JHIFJvb3QgWDEwHhcNMjAwOTA0MDAwMDAw
			WhcNMjUwOTE1MTYwMDAwWjAyMQswCQYDVQQGEwJVUzEWMBQGA1UEChMNTGV0J3Mg
			RW5jcnlwdDELMAkGA1UEAxMCUjMwggEiMA0GCSqGSIb3DQEBAQUAA4IBDwAwggEK
			AoIBAQC7AhUozPaglNMPEuyNVZLD+ILxmaZ6QoinXSaqtSu5xUyxr45r+XXIo9cP
			R5QUVTVXjJ6oojkZ9YI8QqlObvU7wy7bjcCwXPNZOOftz2nwWgsbvsCUJCWH+jdx
			sxPnHKzhm+/b5DtFUkWWqcFTzjTIUu61ru2P3mBw4qVUq7ZtDpelQDRrK9O8Zutm
			NHz6a4uPVymZ+DAXXbpyb/uBxa3Shlg9F8fnCbvxK/eG3MHacV3URuPMrSXBiLxg
			Z3Vms/EY96Jc5lP/Ooi2R6X/ExjqmAl3P51T+c8B5fWmcBcUr2Ok/5mzk53cU6cG
			/kiFHaFpriV1uxPMUgP17VGhi9sVAgMBAAGjggEIMIIBBDAOBgNVHQ8BAf8EBAMC
			AYYwHQYDVR0lBBYwFAYIKwYBBQUHAwIGCCsGAQUFBwMBMBIGA1UdEwEB/wQIMAYB
			Af8CAQAwHQYDVR0OBBYEFBQusxe3WFbLrlAJQOYfr52LFMLGMB8GA1UdIwQYMBaA
			FHm0WeZ7tuXkAXOACIjIGlj26ZtuMDIGCCsGAQUFBwEBBCYwJDAiBggrBgEFBQcw
			AoYWaHR0cDovL3gxLmkubGVuY3Iub3JnLzAnBgNVHR8EIDAeMBygGqAYhhZodHRw
			Oi8veDEuYy5sZW5jci5vcmcvMCIGA1UdIAQbMBkwCAYGZ4EMAQIBMA0GCysGAQQB
			gt8TAQEBMA0GCSqGSIb3DQEBCwUAA4ICAQCFyk5HPqP3hUSFvNVneLKYY611TR6W
			PTNlclQtgaDqw+34IL9fzLdwALduO/ZelN7kIJ+m74uyA+eitRY8kc607TkC53wl
			ikfmZW4/RvTZ8M6UK+5UzhK8jCdLuMGYL6KvzXGRSgi3yLgjewQtCPkIVz6D2QQz
			CkcheAmCJ8MqyJu5zlzyZMjAvnnAT45tRAxekrsu94sQ4egdRCnbWSDtY7kh+BIm
			lJNXoB1lBMEKIq4QDUOXoRgffuDghje1WrG9ML+Hbisq/yFOGwXD9RiX8F6sw6W4
			avAuvDszue5L3sz85K+EC4Y/wFVDNvZo4TYXao6Z0f+lQKc0t8DQYzk1OXVu8rp2
			yJMC6alLbBfODALZvYH7n7do1AZls4I9d1P4jnkDrQoxB3UqQ9hVl3LEKQ73xF1O
			yK5GhDDX8oVfGKF5u+decIsH4YaTw7mP3GFxJSqv3+0lUFJoi5Lc5da149p90Ids
			hCExroL1+7mryIkXPeFM5TgO9r0rvZaBFOvV2z0gp35Z0+L4WPlbuEjN/lxPFin+
			HlUjr8gRsI3qfJOQFy/9rKIJR0Y/8Omwt/8oTWgy1mdeHmmjk7j1nYsvC9JSQ6Zv
			MldlTTKB3zhThV1+XWYp6rjd5JW1zbVWEkLNxE7GJThEUG3szgBVGP7pSWTUTsqX
			nLRbwHOoq7hHwg==
	-----END CERTIFICATE-----		-----END CERTIFICATE-----

Biswajit at 17:31, 20 January 2024

2024-01-20T17:31:28Z

← Older revision		Revision as of 17:31, 20 January 2024
Line 16:		Line 16:
	./acme.sh --issue --alpn -d mail21c.pahwa.com --pre-hook "su - zimbra -c 'zmproxyctl stop'" --post-hook "su - zimbra -c 'zmproxyctl start'"		./acme.sh --issue --alpn -d mail21c.pahwa.com --pre-hook "su - zimbra -c 'zmproxyctl stop'" --post-hook "su - zimbra -c 'zmproxyctl start'"

			[[In case it does not work and give error "Error, can not get domain token entry mail21c.pahwa.com for tls-alpn-01" ]]

			./acme.sh --issue --standalone -d mail21c.pahwa.com --server letsencrypt --pre-hook "su - zimbra -c 'zmmailboxdctl stop'" --post-hook "su - zimbra -c 'zmmailboxdctl start'"

	'''In Case of Renewal , use --renew in place of --issue . You can use --renew --force also .'''		'''In Case of Renewal , use --renew in place of --issue . You can use --renew --force also .'''

Biswajit at 05:41, 22 September 2021

2021-09-22T05:41:39Z

← Older revision		Revision as of 05:41, 22 September 2021
Line 8:		Line 8:
	yum install socat		yum install socat
	cd .acme.sh/		cd .acme.sh/
	For Zimbra 8.6 and below		For Zimbra 8.6 and below ( Only in case of zimbra proxy is not running )

	./acme.sh --issue --alpn -d mail21c.pahwa.com --pre-hook "su - zimbra -c 'zmmailboxdctl stop'" --post-hook "su - zimbra -c 'zmmailboxdctl start'"		./acme.sh --issue --alpn -d mail21c.pahwa.com --pre-hook "su - zimbra -c 'zmmailboxdctl stop'" --post-hook "su - zimbra -c 'zmmailboxdctl start'"

	for 8.7 and Above		for 8.7 and Above ( also in case of 8.6 where zimbra proxy is running )

	./acme.sh --issue --alpn -d mail21c.pahwa.com --pre-hook "su - zimbra -c 'zmproxyctl stop'" --post-hook "su - zimbra -c 'zmproxyctl start'"		./acme.sh --issue --alpn -d mail21c.pahwa.com --pre-hook "su - zimbra -c 'zmproxyctl stop'" --post-hook "su - zimbra -c 'zmproxyctl start'"

Biswajit at 08:52, 29 July 2021

2021-07-29T08:52:10Z

← Older revision		Revision as of 08:52, 29 July 2021
Line 15:		Line 15:

	./acme.sh --issue --alpn -d mail21c.pahwa.com --pre-hook "su - zimbra -c 'zmproxyctl stop'" --post-hook "su - zimbra -c 'zmproxyctl start'"		./acme.sh --issue --alpn -d mail21c.pahwa.com --pre-hook "su - zimbra -c 'zmproxyctl stop'" --post-hook "su - zimbra -c 'zmproxyctl start'"

			'''In Case of Renewal , use --renew in place of --issue . You can use --renew --force also .'''

	cd mail21c.pahwa.com/		cd mail21c.pahwa.com/

Biswajit at 11:06, 10 August 2020

2020-08-10T11:06:38Z

← Older revision		Revision as of 11:06, 10 August 2020
Line 8:		Line 8:
	yum install socat		yum install socat
	cd .acme.sh/		cd .acme.sh/
			For Zimbra 8.6 and below

	./acme.sh --issue --alpn -d mail21c.pahwa.com --pre-hook "su - zimbra -c 'zmmailboxdctl stop'" --post-hook "su - zimbra -c 'zmmailboxdctl start'"		./acme.sh --issue --alpn -d mail21c.pahwa.com --pre-hook "su - zimbra -c 'zmmailboxdctl stop'" --post-hook "su - zimbra -c 'zmmailboxdctl start'"

			for 8.7 and Above

			./acme.sh --issue --alpn -d mail21c.pahwa.com --pre-hook "su - zimbra -c 'zmproxyctl stop'" --post-hook "su - zimbra -c 'zmproxyctl start'"

	cd mail21c.pahwa.com/		cd mail21c.pahwa.com/
	cp mail21c.pahwa.com.cer mail21c.pahwa.com.key fullchain.cer /tmp		cp mail21c.pahwa.com.cer mail21c.pahwa.com.key fullchain.cer /tmp

Biswajit: Created page with "category:Zimbra Issue Deployment of Let's Encrypt Certificate on pahwa and Modelama exports curl https://get.acme.sh | sh yum install socat cd .acme.sh/ ./acme.sh..."

2020-08-02T06:55:27Z

Created page with "category:Zimbra Issue Deployment of Let's Encrypt Certificate on pahwa and Modelama exports curl https://get.acme.sh | sh yum install socat cd .acme.sh/ ./acme.sh..."

New page

[[category:Zimbra]]

Issue Deployment of Let's Encrypt Certificate on pahwa and Modelama exports

curl https://get.acme.sh | sh
yum install socat
cd .acme.sh/
./acme.sh --issue --alpn -d mail21c.pahwa.com --pre-hook "su - zimbra -c 'zmmailboxdctl stop'" --post-hook "su - zimbra -c 'zmmailboxdctl start'"
cd mail21c.pahwa.com/
cp mail21c.pahwa.com.cer mail21c.pahwa.com.key fullchain.cer /tmp
cd /tmp/

Append following on fullchain.cer ( https://wiki.zimbra.com/wiki/Installing_a_LetsEncrypt_SSL_Certificate )
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Verify the Certificate

/opt/zimbra/bin/zmcertmgr verifycrt comm mail21c.pahwa.com.key mail21c.pahwa.com.cer fullchain.cer

Copy the SSL Files

cp -a /opt/zimbra/ssl/zimbra /opt/zimbra/ssl/zimbra.$(date "+%Y%m%d")

Copy the Key

cp mail21c.pahwa.com.key /opt/zimbra/ssl/zimbra/commercial/commercial.key

Deploy the Certificate

/opt/zimbra/bin/zmcertmgr deploycrt comm mail21c.pahwa.com.cer fullchain.cer

Restart Zimbra

su - zimbra
zmcontrol restart