https://wiki.ourominas.com.br/index.php?action=history&feed=atom&title=Instala%C3%A7%C3%A3o_do_ZIMBRA 2026-04-17T14:49:16Z Histórico de revisões para esta página neste wiki MediaWiki 1.45.1 https://wiki.ourominas.com.br/index.php?title=Instala%C3%A7%C3%A3o_do_ZIMBRA&diff=1679&oldid=prev 2020-08-08T03:12:57Z

<p>uma edição</p> <table style="background-color: #fff; color: #202122;" data-mw="interface"> <col class="diff-marker" /> <col class="diff-content" /> <col class="diff-marker" /> <col class="diff-content" /> <tr class="diff-title" lang="pt-BR"> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">← Edição anterior</td> <td colspan="2" style="background-color: #fff; color: #202122; text-align: center;">Edição das 03h12min de 8 de agosto de 2020</td> </tr><tr><td colspan="4" class="diff-notice" lang="pt-BR"><div class="mw-diff-empty">(Sem diferença)</div> </td></tr> <!-- diff cache key omph_wiki-maquine_:diff:1.41:old-1678:rev-1679 --> </table>

imported>Admin https://wiki.ourominas.com.br/index.php?title=Instala%C3%A7%C3%A3o_do_ZIMBRA&diff=1678&oldid=prev 2019-07-30T23:52:38Z

<p></p> <p><b>Página nova</b></p><div>Instalar o Zimbra<br /> Durante a instalação criar o diretorio /opt/zimbra/perl5<br /> colocar como usuario e grupo o diretorio acima zimbra.zimbra<br /> fazer<br /> echo &#039;Port 9282&#039; &gt; /opt/zimbra/ssl/config<br /> e apos a instalacao fazer:<br /> <br /> #su - zimbra<br /> $zmupdateauthkeys<br /> $exit<br /> #/opt/zimbra/libexec/zmsyslogsetup<br /> #su - zimbra<br /> zmprov ms mail.ourominas.net.br zimbraRemoteManagementPort 9282<br /> $exit<br /> #yum clean all<br /> #yum -y update<br /> <br /> atrase em 30 segundos o start do zimbra<br /> <br /> #init 6<br /> <br /> Entrar no Zimbra e liberar que os acessos sejam via http e https<br /> <br /> <br /> Seguir os passos apresentados em:<br /> https://www.sbarjatiya.com/notes_wiki/index.php/CentOS_7.x_Install_lets_encrypt_automated_SSL_certificate_in_Zimbra<br /> <br /> <br /> <br /> <br /> CentOS 7.x Install lets encrypt automated SSL certificate in Zimbra<br /> SSL certificate setup<br /> To setup lets encrypt SSL certificates use:<br /> <br /> First stop web and mailbox services as *zimbra user*:<br /> zmproxyctl stop<br /> <br /> zmmailboxdctl stop<br /> Download letsencrypt github package as *root user*<br /> yum -y install git epel-release<br /> <br /> git clone https://github.com/letsencrypt/letsencrypt<br /> <br /> cd letsencrypt<br /> Get letsencrypt certificates for domain using:<br /> ./letsencrypt-auto certonly --standalone -d mail.zimbra.ourominas.net.br -d zimbra.ourominas.net.br<br /> On various prompts use:<br /> Emergency email - saurabh@ourominas.net.br<br /> Agree/Cancel - A<br /> Yes/No - Y<br /> The important file locations are:<br /> /etc/letsencrypt/live/mail.zimbra.ourominas.net.br/fullchain.pem<br /> /etc/letsencrypt/live/mail.zimbra.ourominas.net.br/privkey.pem<br /> Download Root and intermediate certificates from https://letsencrypt.org/certificates/ Example<br /> cd /etc/letsencrypt/live/mail.zimbra.ourominas.net.br/<br /> <br /> wget https://letsencrypt.org/certs/isrgrootx1.pem.txt<br /> <br /> wget https://letsencrypt.org/certs/letsencryptauthorityx3.pem.txt<br /> To give access to zimbra to certificates copy them to a sub-folder inside /opt/zimbra *as root*:<br /> cd /etc/letsencrypt/live/mail.zimbra.ourominas.net.br/<br /> <br /> cat isrgrootx1.pem.txt letsencryptauthorityx3.pem.txt chain.pem &gt; combined.pem<br /> <br /> mkdir /opt/zimbra/ssl/letsencrypt<br /> <br /> cp /etc/letsencrypt/live/mail.zimbra.ourominas.net.br/* /opt/zimbra/ssl/letsencrypt/<br /> <br /> chown zimbra:zimbra /opt/zimbra/ssl/letsencrypt/*<br /> <br /> ls -la /opt/zimbra/ssl/letsencrypt/<br /> Install certificates *as zimbra* user:<br /> cd /opt/zimbra/ssl/letsencrypt/<br /> <br /> /opt/zimbra/bin/zmcertmgr verifycrt comm privkey.pem cert.pem combined.pem<br /> <br /> <br /> #If above validation succeeds<br /> <br /> cp /opt/zimbra/ssl/letsencrypt/privkey.pem /opt/zimbra/ssl/zimbra/commercial/commercial.key<br /> <br /> /opt/zimbra/bin/zmcertmgr deploycrt comm cert.pem combined.pem<br /> <br /> <br /> zmcontrol restart<br /> Open https://mail.zimbra.ourominas.net.br:7071/zimbraAdmin/ and verify that certificate along with root &quot;ISRG Root X1&quot; and Intermediate &quot;Lets Encrypt Authority X3&quot; is coming up properly.<br /> Test certificates using:<br /> openssl s_client -starttls smtp -connect zimbra.ourominas.net.br:25 -showcerts<br /> <br /> openssl s_client -connect zimbra.ourominas.net.br:465 -showcerts<br /> <br /> openssl s_client -connect zimbra.ourominas.net.br:443 -showcerts<br /> <br /> openssl s_client -connect zimbra.ourominas.net.br:993 -showcerts<br /> <br /> openssl s_client -starttls imap -connect zimbra.ourominas.net.br:143 -showcerts<br /> <br /> Refer:<br /> <br /> https://wiki.zimbra.com/wiki/Installing_a_LetsEncrypt_SSL_Certificate<br /> <br /> Listen on port 80 with forced HTTPS redirection<br /> To configure Zimbra to listen on port 80 for forced HTTPS redirection use:<br /> <br /> Configure forced HTTPS redirection<br /> su - zimbra<br /> <br /> ~/libexec/zmproxyconfig -e -w -o -a 8080:80:8443:443 -x https -H `zmhostname`<br /> <br /> zmprov ms `zmhostname` zimbraReverseProxyMailMode redirect<br /> Note that earlier method of simply using &#039;zmtlsctl redirect&#039; is no longer available in latest versions. Hence above steps are required<br /> Refer:<br /> <br /> https://blog.christosoft.de/2015/06/zimbra-redirect-http-to-https/<br /> <br /> SSL certificate renewal configuration via crontab<br /> This auto-renewal assumes that chain (Root and Intermediate) remains same.<br /> <br /> Create /root/renew-certificate.sh with:<br /> su - zimbra -c &quot;zmcontrol stop&quot;<br /> <br /> /root/letsencrypt/letsencrypt-auto renew<br /> <br /> cp /etc/letsencrypt/live/mail.zimbra.ourominas.net.br/privkey.pem /opt/zimbra/ssl/letsencrypt/<br /> <br /> cp /etc/letsencrypt/live/mail.zimbra.ourominas.net.br/cert.pem /opt/zimbra/ssl/letsencrypt/<br /> <br /> cp /opt/zimbra/ssl/letsencrypt/privkey.pem /opt/zimbra/ssl/zimbra/commercial/commercial.key<br /> <br /> chown zimbra:zimbra /opt/zimbra/ssl/letsencrypt/*<br /> <br /> su - zimbra -c &quot;cd /opt/zimbra/ssl/letsencrypt/; /opt/zimbra/bin/zmcertmgr deploycrt comm cert.pem combined.pem&quot;<br /> <br /> su - zimbra -c &quot;zmcontrol start&quot;<br /> chmod +x /root/renew-certificate.sh<br /> For root user crontab (crontab -e) add:<br /> 10 5 * * 0 /root/renew-certificate.sh<br /> where instead of 10 and 5 use a random value between 5 and 55 for minutes (first number) and random value between 1 and 5 for hour (second number)<br /> <br /> <br /> <br /> <br /> arq_zimbra.txt<br /> <br /> <br /> <br /> <br /> ./letsencrypt-auto certonly --standalone -d mail.ourominas.net.br -d mx.ourominas.net.br -d smtp.ourominas.net.br -d imap.ourominas.net.br -d ldap.ourominas.net.br -d pop.ourominas.net.br -d www.ourominas.net.br -d webmail.ourominas.net.br -d ftp.ourominas.net.br -d ourominas.net.br<br /> <br /> <br /> <br /> <br /> <br /> <br /> su - zimbra -c &quot;zmcontrol stop&quot;<br /> /root/letsencrypt/letsencrypt-auto renew<br /> cp /etc/letsencrypt/live/mail.zimbra.sbarjatiya.com/privkey.pem /opt/zimbra/ssl/letsencrypt/<br /> cp /etc/letsencrypt/live/mail.zimbra.sbarjatiya.com/cert.pem /opt/zimbra/ssl/letsencrypt/<br /> cp /opt/zimbra/ssl/letsencrypt/privkey.pem /opt/zimbra/ssl/zimbra/commercial/commercial.key<br /> chown zimbra:zimbra /opt/zimbra/ssl/letsencrypt/*<br /> su - zimbra -c &quot;cd /opt/zimbra/ssl/letsencrypt/; /opt/zimbra/bin/zmcertmgr deploycrt comm cert.pem combined.pem&quot;<br /> su - zimbra -c &quot;zmcontrol start&quot;<br /> <br /> <br /> [[Category: TI]]<br /> [[Category: ZIMBRA]]</div>

2532252>Jefferson