Results 1 to 7 of 7

Thread: Editing an existing certificate.

  1. #1
    starcenterlr Guest

    Default Editing an existing certificate.

    Is it possible to edit an existing certificate in Zimbra? Specifically, I need to make sure the issuer CN is identical to the subject CN.

    Is there anyway to do this without creating an entirely new certificate?

    Code:
    issuer= /C=US/ST=N/A/L=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=zimbramail.star.lan
    Needs to be changed to:

    Code:
    issuer= /C=US/ST=N/A/L=N/A/O=Zimbra Collaboration Suite/OU=Zimbra Collaboration Suite/CN=currentmailserver.star.lan

  2. #2
    starcenterlr Guest

    Default

    I'm essentially just trying to prevent browsers and clients from barking about the certificate coming from one source, but being named another.

    I'd like to do this without reimplementing an entirely new certificate.

  3. #3
    chauvetp is offline Elite Member
    Join Date
    Apr 2008
    Location
    New Paltz, NY
    Posts
    313
    Rep Power
    7

    Default

    I'm almost positive there is no way of editing a certificate without regenerating one.

  4. #4
    starcenterlr Guest

    Default

    Quote Originally Posted by chauvetp View Post
    I'm almost positive there is no way of editing a certificate without regenerating one.
    Thanks for the reply, Chauvetp.

    Any idea what the best (and more importantly, safe) way to generate and deploy a new ticket?

  5. #5
    starcenterlr Guest

    Default

    I found this link:

    How to create new CA on Zimbra 5.0 . | STORY of AODDY.

    As far as certificates go, should my creation and deployment of a new certificate fail, what is the best way to restore the previous certificate?

    Is it as simple as restoring a backup of the /opt/zimbra/ssl/ folder?

  6. #6
    nufan is offline Senior Member
    Join Date
    Jun 2008
    Posts
    59
    Rep Power
    7

    Default

    Is using the web admin console not a valid way to do this ? I noticed that my 1 year cert's had run out the other day. I tried the command line method outlined in the release notes but got an error message. I just used the web console to install a new one and it now shows the new expiration date of 1 year from that day (late next year).

    Only thing I get is a cert. error every time I open mac mail for the first time i send an email, but I can simply push "Connect" and it works fine until I get the error again next time I open Mac Mail.

    Maybe the web console won't work for you, maybe the link above will. I'm kind of curious of the difference though as I don't fully understand what the certificate is doing, or why I get that message in Mac Mail.

  7. #7
    starcenterlr Guest

    Default

    Quote Originally Posted by nufan View Post
    Is using the web admin console not a valid way to do this ? I noticed that my 1 year cert's had run out the other day. I tried the command line method outlined in the release notes but got an error message. I just used the web console to install a new one and it now shows the new expiration date of 1 year from that day (late next year).

    Only thing I get is a cert. error every time I open mac mail for the first time i send an email, but I can simply push "Connect" and it works fine until I get the error again next time I open Mac Mail.

    Maybe the web console won't work for you, maybe the link above will. I'm kind of curious of the difference though as I don't fully understand what the certificate is doing, or why I get that message in Mac Mail.
    Thanks for the reply.

    When you used the web interface, you simply created an entirely new certificate, or did you select the "Replace the existing CSR" option?

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [SOLVED] Installing existing SSL certificates (solved)
    By inigoml in forum Administrators
    Replies: 22
    Last Post: 02-24-2009, 10:32 AM
  2. Certificate fun...
    By TommyTheKid in forum Administrators
    Replies: 2
    Last Post: 02-12-2008, 05:32 PM
  3. Replies: 1
    Last Post: 11-05-2007, 06:55 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •