https://wiki.tetrain.com/index.php?action=history&feed=atom&title=TRIBURG_SSL_DEPLOYMENT 2026-07-27T11:10:57Z Revision history for this page on the wiki MediaWiki 1.43.9 https://wiki.tetrain.com/index.php?title=TRIBURG_SSL_DEPLOYMENT&diff=4353&oldid=prev 2026-07-26T16:27:11Z

<p>Auto-created from uploaded PDF text extraction</p> <p><b>New page</b></p><div>&#039;&#039;Auto-generated from the uploaded PDF [[:File:TRIBURG_SSL_DEPLOYMENT.pdf|TRIBURG_SSL_DEPLOYMENT.pdf]]. This is an extracted-text rendering for searchability; see the original PDF for exact formatting, diagrams, tables, and images.&#039;&#039;<br /> <br /> &lt;pre&gt;<br /> &lt;nowiki&gt;<br /> TRIBURG SSL DEPLOYMENT<br /> 80 Port is not allowed - we have allow the port then we are able to get certificates<br /> <br /> 1. yum install -y python3 python3-venv libaugeas0<br /> 2. python3 -m venv /opt/certbot/<br /> 3. /opt/certbot/bin/pip install --upgrade pip<br /> 4. /opt/certbot/bin/pip install certbot<br /> 5. ln -s /opt/certbot/bin/certbot /usr/local/sbin/certbot<br /> 6. /usr/local/sbin/certbot certonly -d $(hostname --fqdn) --standalone --preferred-<br /> chain &quot;ISRG Root X2&quot; --agree-tos --register-unsafely-without-email<br /> 7. cat &gt;&gt; /usr/local/sbin/letsencrypt-zimbra &lt;&lt; EOF<br /> #!/bin/bash<br /> /usr/local/sbin/certbot certonly -d $(hostname --fqdn) --standalone -n --<br /> preferred-chain &quot;ISRG Root X2&quot; --agree-tos --register-unsafely-without-email<br /> cp &quot;/etc/letsencrypt/live/$(hostname --fqdn)/privkey.pem&quot;<br /> /opt/zimbra/ssl/zimbra/commercial/commercial.key<br /> chown zimbra:zimbra /opt/zimbra/ssl/zimbra/commercial/commercial.key<br /> wget -O /tmp/ISRG-X2.pem https://letsencrypt.org/certs/isrg-root-x2.pem<br /> rm -f &quot;/etc/letsencrypt/live/$(hostname --fqdn)/chainZimbra.pem&quot;<br /> cp &quot;/etc/letsencrypt/live/$(hostname --fqdn)/chain.pem&quot;<br /> &quot;/etc/letsencrypt/live/$(hostname --fqdn)/chainZimbra.pem&quot;<br /> cat /tmp/ISRG-X2.pem &gt;&gt; &quot;/etc/letsencrypt/live/$(hostname --<br /> fqdn)/chainZimbra.pem&quot;<br /> chown zimbra:zimbra /etc/letsencrypt -R<br /> cd /tmp<br /> su zimbra -c &#039;/opt/zimbra/bin/zmcertmgr deploycrt comm<br /> &quot;/etc/letsencrypt/live/$(hostname --fqdn)/cert.pem&quot;<br /> &quot;/etc/letsencrypt/live/$(hostname --fqdn)/chainZimbra.pem&quot;&#039;<br /> rm -f &quot;/etc/letsencrypt/live/$(hostname --fqdn)/chainZimbra.pem&quot;<br /> EOF<br /> <br /> 8. chmod +rx /usr/local/sbin/letsencrypt-zimbra<br /> 9. ln -s /usr/local/sbin/letsencrypt-zimbra /etc/cron.daily/letsencrypt-zimbra<br /> 10. /etc/cron.daily/letsencrypt-zimbra<br /> 11. sudo su zimbra -c &#039;/opt/zimbra/bin/zmcontrol restart&#039;<br /> &lt;/nowiki&gt;<br /> &lt;/pre&gt;</div>

Admin