Différences

Ci-dessous, les différences entre deux révisions de la page.

--- certificate_in_possibly_stale_keystore [2021/08/01 09:28] – créée inc002
+++ certificate_in_possibly_stale_keystore [2021/11/11 12:03] (Version actuelle) – inc002
@@ Ligne 9: / Ligne 9: @@
   SubjectAltName=mail.domain.tld
-NOTE: possibly stale keystore: /opt/zimbra/mailboxd/etc/keystore
+  NOTE: possibly stale keystore: /opt/zimbra/mailboxd/etc/keystore
-- mailboxd: /opt/zimbra/mailboxd/etc/mailboxd.pem
+  \- mailboxd: /opt/zimbra/mailboxd/etc/mailboxd.pem
-notBefore=Jul 31 20:31:04 2021 GMT
+  notBefore=Jul 31 20:31:04 2021 GMT
-notAfter=Oct 29 20:31:02 2021 GMT
+  notAfter=Oct 29 20:31:02 2021 GMT
-subject=CN = mail.domain.tld
+  subject=CN = mail.domain.tld
-issuer=C = US, O = Let's Encrypt, CN = R3
+  issuer=C = US, O = Let's Encrypt, CN = R3
   - Find the keystore password in zimbra configuration
@@ Ligne 24: / Ligne 24: @@
   openssl pkcs12 -export -name jetty -in /opt/zimbra/ssl/zimbra/commercial/commercial.crt -inkey /opt/zimbra/ssl/zimbra/commercial/commercial.key -out jetty.p12
-  - Delete the actual certificate into keystore
+  - cd to /opt/zimbra/mailboxd/etc/
+  cd /opt/zimbra/mailboxd/etc/
+  - Copy /tmp/tmp.Jlr8nDRlEp/0000_cert.pem (or other path created by cert geneation script) to mailboxd.pem
+  cp /tmp/tmp.Jlr8nDRlEp/0000_cert.pem mailboxd.pem
+  - Delete the actual certificate into keystore if not tempered or corrupt else delete the keystore file
   keytool -delete -alias jetty -keystore keystore -storepass passwd