[SOLVED] openssl x509 DER for outlook clients

[devil]

Hi all,


when i run command:

openssl x509 -days 3650 -in ca.pem -out cacert.der -outform DER

into directory /opt/zimbra/ssl/zimbra/ca , my new cacert.der is expared and is valid only for 365, any ideas ?

My server certificate from admin web page is valid to 2019.

10x for help.

[devil]

The command must run by root.

cd /opt/zimbra
mv ssl ssl.backup
mkdir ssl
chown -R zimbra:zimbra ./ssl
/opt/zimbra/bin/zmcertmgr createca -new 
/opt/zimbra/bin/zmcertmgr createcrt -new -days 365
/opt/zimbra/bin/zmcertmgr deploycrt self
/opt/zimbra/bin/zmcertmgr deployca

#######restart zimbra services with user zimbra ####
su zimbra
zmcontrol stop
zmcontrol start
exit 
cd /opt/zimbra/ssl/zimbra/ca
openssl x509  -in ca.pem  -out cert.der  -outform DER

Enjoy now you have valid client .der cert for 1 Y.

[devil]

BTW 10x for your help!!!