UCC SSL Certs

[vclawson]

Currently we use a UCC SSL Cert as we host multiple domains. However, since Zimbra cannot accept multiple certs and godaddy does not allow an upgrade of the UCC cert to more domains, each time we hit the limit of our UCC we need to purchase another cert. Or we need to purchase more than we need now to accomodate the anticipated need later. I wanted to know if anyone has found another way around this as the number of domains that we host is going to continue to grow.

Thanks

[rayt_rwm]

How do you Generate your UCC Cert, and add it to your Zimbra server? My hostname has a NON-FQDN, but I want to use a UCC Cert.

[phoenix]

Originally Posted by rayt_rwm

How do you Generate your UCC Cert, and add it to your Zimbra server? My hostname has a NON-FQDN, but I want to use a UCC Cert.

Your server should have a hostname that is a FQDN.

[rayt_rwm]

We are going to use the server primarily as an Internal domain mail server. I want to get the https sessions to work, but I don't want to lose the performance on the internal domain. We cannot be the only company with an internal domain (that was setup 15 years ago) that is different from their FQDN.

Maybe I could give it a FQDN, and tell our Internal DNS to point it at the Internal IP, and when they use the internet from "outside" the Firewall will still point traffic correctly. If that doesn't work I will be looking at an ssl-vpn to use instead.

[phoenix]

Originally Posted by rayt_rwm

We are going to use the server primarily as an Internal domain mail server. I want to get the https sessions to work, but I don't want to lose the performance on the internal domain. We cannot be the only company with an internal domain (that was setup 15 years ago) that is different from their FQDN.

The FQDN doesn't actually have to be the same as your 'real' domain although to save confusion I'd usually recommend that it is.

Originally Posted by rayt_rwm

Maybe I could give it a FQDN, and tell our Internal DNS to point it at the Internal IP, and when they use the internet from "outside" the Firewall will still point traffic correctly. If that doesn't work I will be looking at an ssl-vpn to use instead.

If you wish to use the server just to send internal mail only then search the wiki for the word 'restrict'.