SSL - Commercial or Self Signed?

[jhoelz]

Which way to go? What are the pros and cons of each? Will a self signed work without any "security messages" if applied properly?

[yang]

with the self-signed, you will have to ask each user to import the cert into their browser to make the warning mesg go away, and if this is anything remotely business like, you should get a legit cert, it's cheap.

- Yang

[jhoelz]

Will do.
Anyone using a cert from these guys? enom has a special on them for $10
http://www.securebusinessservices.com/

[phingers]

thanks for the info, so I want to get an official cert for mail. But this is a zimbra server used for multiple domains. So does it matter which domain I get the cert for?

hostname: zimbra.example.com

domain1: mail.example.com
domain2: mail.test.com
domain3: mail.three.com

So do I want to get one for zimbra.example.com, and if I do, will that still cause warnings in thunderbird or others when they connect to any of the used domains?

Thanks.

-Bryan

[Nutz]

I *think* that you can get 1 cert to cover all 3, but I'm not sure how to produce a CSR for it.

Check out these two wiki pages:
http://wiki.zimbra.com/index.php?tit...l_Certificates
http://wiki.zimbra.com/index.php?tit...icate_Problems

Those *might* help.

-Nutz

Once you get your cert, I've just gone through the whole commercial cert install process (wicked fun), I'd be happy to help if you get stuck.

[phingers]

I dont think I can have one certificate that validates for three different domain names. Godaddy has a 6-1 cert, but it is for .org, .com, .biz all with the same domain name.

Plus each cert needs an IP address right? So how do we load multiple certs into zimbra, and how will it know which to use with what domains?