Ssl for multiple domains in zimbra.

[h_aleksi]

We are hosting providers using Zimbra Professional.
We currently have one ssl sertificate for our own domain in zimbra.

Some our customers have requested own ssl sertificate for their mail.domain.fi. I have tryed to find solution for this and if i understood correctly zimbra doesn't support multiple certificates to be installed for server.
Putting zimbra inside Iframe is something i would considering "cheat" and doesn't give that security what is usually wanted from ssl.

We have looked for multi-domain sertificates as one option but they are quite expensive.

We have single-server installation, what would you consider best/easiest to deploy/cheapest solution for this problem?

[olecoot]

I too have this dilemma. I have been looking into "Unified Communications Certificate" which would be issued using all of the domains of our hosted customers. Trouble is, that the certificate would have to be reissued and installed each time one of our customers required a certificate.

Does Zimbra support a UCC cert? I thought I read in the forums that it does not.

[gettyless]

multiple ssl certs jetty - Google Search

lead me to:
Ajcody-Notes-SSLCerts - Zimbra :: Wiki

and then:
Bug 8128 – multiple SSL certificates on one server

Looks like an ancient P1 enhancement.

[sugiggs]

You can put apache proxy in front to serve the webmail...

You can configure multiple SSL (of course using different IPs) on apache..

[olecoot]

Originally Posted by gettyless

multiple ssl certs jetty - Google Search

lead me to:
Ajcody-Notes-SSLCerts - Zimbra :: Wiki

and then:
Bug 8128 – multiple SSL certificates on one server

Looks like an ancient P1 enhancement.

Good information. Thank you!

[ewilen]

We use a GoDaddy UCC cert on our Zimbra install. Works perfectly.

[blazeking]

Originally Posted by ewilen

We use a GoDaddy UCC cert on our Zimbra install. Works perfectly.

Same here. Works great, but it's a pain if we want to add a domain to the list - reissue and install. But until Bug 8128 – multiple SSL certificates on one server is finished, I don't think we have any other option.