rewrite https url to canonical server name

[boblin]

Hi,
i have zimbra installed on server1.domain.com. I want to tell users to use url mail.domain.com for easy to remember. For security reason i use redirect http->https (zmtlsctl redirect). But if user's browser is redirected to https://mail.domain.com, browser alert about certificate, because SSL cert is for server1.domain.com.

How to solve this? Redirecting users from http://mail.domain.com to https://server1.domain.com? But how?

Thanks.

[boblin]

Does anybody know the answer?

Thanks.

[tctc]

I also would like to know how to stop IE7 and Mozilla from issuing an error message on my self-signed certificate. Ie are doing the exact same thing with server and domain names and are using https.

[Bill Brock]

Did you install the certificate?

[tctc]

it is a self-signed certificate auto created when i installed zimbra 5.0.2. the ie7 "certificate invalid" warning is the number one zimbra complaint with my users.

[Edward Owens]

I am having the same issue with the self-signed certificate generated by the Zimbra install. We are just testing the Network version and considering purchasing. Am I also going to have to purchase a commericial certificate to get this to work?

[Bill Brock]

I believe you can install the CA from your Zimbra server into the certificate store on your Windows machine to keep from getting this error.

If this works, then e-mail this CA to your users and have them install it.

IE7 is looking for a complete chain starting with a CA.