Certificat here ......
 
Notifications
Clear all

Certificat here ... But not here ... but always here

4 Posts
2 Users
0 Reactions
85 Views
(@erous)
Joined: 1 month ago
Posts: 3
Topic starter  

After a newer install of a complete Carbonio server (migration from  zimbra 9 FOSS tanks for all the tutorial) I got a problem for one, and only one, domain.

This domain can't send any message using the webmail or thunderbird.

Each time I test, the webmail just say "something wrong was happend" and Thunderbird ask to agree the certificat.
It show me a certificat with "mydomain.tld".

I deleted succesfull this certificat with certbot, and the command "certbot certificates" confirm this one is gone.
"Congratulations! You have successfully revoked the certificate that was located at /opt/zextras/common/certbot/etc/letsencrypt/archive/mydomain.tld/cert1.pem"
zmproxyctl restart ... But, nothing change when I send a message.
In the admin panel, the certificat is gone.

I created virtual host "smtp.mydomain.tld" and attempt to create a certificat with the help of the this script I modified to use dns-plugin (tks @sharif)
But it failed
I made it by admin pannel (the virtual host is listed) but impossible to generate a certificat.

I send "zmcertmgr viewdeployedcrt" command and "mydomain.tld" is always here ...

It's make me nuts.


   
Quote
(@sharif)
Admin
Joined: 2 years ago
Posts: 591
 

@erous

Hi,

Could you please check out this article and see if you can find anything:

https://community.zextras.com/how-to-configure-lets-encrypt-ssl-certificate-for-multiple-domains-in-multi-tenant-carbonio-using-admin-ui-carbonio-ce/

Feel free to share your findings.

Regards,

Sharif

a


   
ReplyQuote
(@erous)
Joined: 1 month ago
Posts: 3
Topic starter  

@sharif Yes I already used it before asking for help ... But this certificat "mydomain.tld" refuses to obey ... And I cant erase it from the server.


   
ReplyQuote
(@erous)
Joined: 1 month ago
Posts: 3
Topic starter  

Is there a solution with this method ?

cleaning /opt/zextras/ssl

/opt/zextras/bin/zmcertmgr createca -new
/opt/zextras/bin/zmcertmgr deployca
/opt/zextras/bin/zmcertmgr createcrt -new -days 365
/opt/zextras/bin/zmcertmgr deploycrt self

Not sure, what do you think ?


   
ReplyQuote