[LMStone]

Originally Posted by cmilfo

Can someone reply in regards to mrfileio's inquiry? We're currently testing ZCS (testing with ZCS Network 4.5.4) for use with ~10 domains. At least 4 of these domains require SSL access.

Casey,

In our experience this is not possible.

There may be a way to do it, but we haven't found one. We are running NE 4.5.3 on SLES9 and have had requests from several customers for their own SSL cert, so they can go to "webmail.theirdomain.com" instead of going to ourzimbraserver.ourdomain.com.

The issue is that an SSL cert needs a unique IP address, but each Zimbra server only has one. Further, a wildcard cert only handles subdomains, and so won't work for your customers (nor ours).

On some of our other non-Zimbra Apache servers, we just bind multiple IP addresses to the NIC and put each virtual host on a separate IP.

There seems to be no facility within Zimbra presently to do that.

I'm about to open an enhancement request on the support portal for this.

Probably not what you wanted to hear, but there you are. It's still a great product and has been rock-solid for us, but this does seem like a surprising feature gap (at least to me!).

All the best,
Mark