Commercial SSL certtificate installation

[Daryl Jones]

Can anyone point me to a list of the steps required to install a commercial SSL certificate? I would like to install a wildcard SSL cert that we obtained from GoDaddy.

GoDaddy has options to select a certificate type. I chose 'tomcat'. Is this correct? Can I use the same cert for the MTA etc?

[jonnyRo]

I am also unclear as to how to install a certificate in zimbra.

I have a certificate intended for a webserver, that I had created for zimbra.raydiance-inc.com. Provided by GeoTrust.

I have the server.crt and the server.crt.key files, which contain the public and private key's respectively. How can I install these.

The admin.pdf guide makes mention of the zmcertinstall command, but in reference to self signed certificate installation.

My ultimate goal is to provide SSL encryption for IMAP/POP3/SMTP and the webgui.

[KevinH]

You can use zmcertinstall to do this. Just point to your .crt and .key file. Run it once for mta and once for mailbox.

[jonnyRo]

I get this error when running it for mailbox.

zmcertinstall mailbox ssl/ssl/server/server.crt ssl/ssl/server/server.key
** Importing server cert

keytool error: java.lang.Exception: Public keys in reply and keystore don't match
[zimbra@zimbra ~]$

[marcmac]

Originally Posted by jonnyRo

I get this error when running it for mailbox.

zmcertinstall mailbox ssl/ssl/server/server.crt ssl/ssl/server/server.key
** Importing server cert

keytool error: java.lang.Exception: Public keys in reply and keystore don't match
[zimbra@zimbra ~]$

Are server.crt and server.key the files for your "real" cert? Not your self-signed cert?

You'll need to delete the tomcat cert, first, since it appears to be trying to match it up with the csr that's in there:
keytool -delete -keystore /opt/zimbra/tomcat/conf/keystore -alias tomcat

Then try the certinstall

[jonnyRo]

It asks me for the keystore password when I go to delete it. Is there an easy way to find out what this password is? Perhaps it's somewhere in the LDAP database.

[marcmac]

Originally Posted by jonnyRo

It asks me for the keystore password when I go to delete it. Is there an easy way to find out what this password is? Perhaps it's somewhere in the LDAP database.

keystore pass is "zimbra"