[SOLVED] Renew GoDaddy SSL Cert

[Meaulnes]

All,
I have a multi-server Zimbra install (a cluster I guess). When I deployed, I generated a 1024 CSR and had it signed by GoDaddy. This cert will expire in 5/2010, and when I go to renew it, GoDaddy tells me that it needs to be at least 2048 bits.
The reasonng makes sense, but zmcertmgr won't let me generate a new CSR, or I suppose I should say I can't figure out how to regenerate the CSR.
Any hints?

This particular cluster is running: Release 6.0.5_GA_2213.UBUNTU8 UBUNTU8 FOSS edition.

[ewilen]

Pretty sure this has been discussed on the forums. Have you tried searching?

[Meaulnes]

I have, not to great avail. I will continue my efforts tonight.

[ewilen]

Take a look at this thread, let us know if it helps: Manual certificate / installation for Godaddy 2048 requirement

[blazeking]

Here's the instruction I received from Zimbra Support when renewing my GoDaddy cert a few months back:


/opt/zimbra/bin/zmcertmgr createcsr comm -new -keysize 2048 "/C=<Country>/ST=<State>/L=<City>/O=<Orginization>/CN=<servername>"


That generated the CSR I needed for GoDaddy to authorize.

[Meaulnes]

Thanks guys! It was all easier than I thought it would be.