Zimbra Install Letsencrypt

dnf install -y epel-release

or,

dnf install certbot

sudo su - zimbra -c "zmproxyctl stop"

sudo su - zimbra -c "zmmailboxdctl stop"

sudo su - zimbra -c 'source ~/bin/zmshutil; zmsetvars'

sudo su - zimbra -c 'zmhostname'

sudo su - zimbra -c 'hostname --fqdn'

export EMAIL="user@domain.com"

export ZIMBRA_FQDN=$(hostname -f)

sudo certbot certonly --standalone \

  -d $ZIMBRA_FQDN \

  --preferred-chain "ISRG Root X1" \

  --force-renewal \

  --preferred-challenges http \

  --agree-tos \

  -n \

  -m $EMAIL \

  --keep-until-expiring \

  --key-type rsa

sudo mkdir /opt/zimbra/ssl/letsencrypt

CERTPATH=/etc/letsencrypt/live/$ZIMBRA_FQDN

sudo cp  $CERTPATH/* /opt/zimbra/ssl/letsencrypt/

ls /opt/zimbra/ssl/letsencrypt/

cert.pem  chain.pem  fullchain.pem  privkey.pem  README

cat $CERTPATH/chain.pem | sudo tee /opt/zimbra/ssl/letsencrypt/zimbra_chain.pem

cat /opt/zimbra/ssl/letsencrypt/zimbra_chain.pem

wget -O /tmp/ISRG-X1.pem https://letsencrypt.org/certs/isrgrootx1.pem.txt

cat /tmp/ISRG-X1.pem | sudo tee -a  /opt/zimbra/ssl/letsencrypt/zimbra_chain.pem

cat /opt/zimbra/ssl/letsencrypt/zimbra_chain.pem

sudo chown -R zimbra:zimbra /opt/zimbra/ssl/letsencrypt/

sudo su - zimbra -c '/opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/letsencrypt/privkey.pem /opt/zimbra/ssl/letsencrypt/cert.pem /opt/zimbra/ssl/letsencrypt/zimbra_chain.pem'

sudo cp -a /opt/zimbra/ssl/zimbra /opt/zimbra/ssl/zimbra.$(date "+%Y.%m.%d-%H.%M")

sudo cp /opt/zimbra/ssl/letsencrypt/privkey.pem /opt/zimbra/ssl/zimbra/commercial/commercial.key

sudo chown zimbra:zimbra /opt/zimbra/ssl/zimbra/commercial/commercial.key

sudo su - zimbra -c '/opt/zimbra/bin/zmcertmgr deploycrt comm /opt/zimbra/ssl/letsencrypt/cert.pem /opt/zimbra/ssl/letsencrypt/zimbra_chain.pem'

sudo su - zimbra -c "zmcontrol restart"

Share on Google Plus

About Penguin Technology

I am a passionate cloud and DevOps professional specializing in Linux and open-source solutions. Through this blog, I share my knowledge and experience with the community, offering tips and insights on cloud technologies and DevOps practices.