Compare commits

...

2 Commits

Author SHA1 Message Date
f9fa04fa1b specified key-type 2023-06-02 08:35:55 +03:00
d6a1d36920 fix typo 2023-06-02 06:55:43 +03:00
2 changed files with 3 additions and 3 deletions

View File

@ -41,7 +41,7 @@ certfirst=mail.domain.zone
sudo su - zimbra -c "/opt/zimbra/bin/zmcontrol stop" sudo su - zimbra -c "/opt/zimbra/bin/zmcontrol stop"
# add additional hostnames, issue certificate and download chain # add additional hostnames, issue certificate and download chain
sudo certbot certonly --standalone --email mail@domain.zone --preferred-chain "ISRG Root X1" -d "${certfirst}" -d smtp.domain.zone -d pop3.domain.zone -d imap.domain.zone sudo certbot certonly --standalone --email mail@domain.zone --preferred-chain "ISRG Root X1" --key-type rsa --rsa-key-size 2048 -d "${certfirst}" -d smtp.domain.zone -d pop3.domain.zone -d imap.domain.zone
sudo sh -c "wget -O - https://letsencrypt.org/certs/isrgrootx1.pem.txt --no-check-certificate >> /etc/letsencrypt/live/${certfirst}/chain.pem" sudo sh -c "wget -O - https://letsencrypt.org/certs/isrgrootx1.pem.txt --no-check-certificate >> /etc/letsencrypt/live/${certfirst}/chain.pem"
# start zimbra # start zimbra
@ -61,7 +61,7 @@ sudo su - zimbra -c "/opt/zimbra/bin/zmcertmgr deploycrt comm /opt/zimbra/ssl/zi
sudo su - zimbra -c "/opt/zimbra/bin/zmcontrol restart" sudo su - zimbra -c "/opt/zimbra/bin/zmcontrol restart"
``` ```
When the certificate is issued, renew certificate is possible by crontab. When the certificate issued, renew certificate is possible by crontab.
```bash ```bash
# download # download

View File

@ -180,7 +180,7 @@ certrenew() {
certarray+=" -d ${domain}" certarray+=" -d ${domain}"
done done
fi fi
certbot certonly --standalone --email "${certemail}" --preferred-chain "ISRG Root X1" "${certarray}" certbot certonly --standalone --email "${certemail}" --key-type rsa --rsa-key-size 2048 --preferred-chain "ISRG Root X1" "${certarray}"
wget -O - https://letsencrypt.org/certs/isrgrootx1.pem.txt --no-check-certificate >> "/etc/letsencrypt/live/${certfirst}/chain.pem" wget -O - https://letsencrypt.org/certs/isrgrootx1.pem.txt --no-check-certificate >> "/etc/letsencrypt/live/${certfirst}/chain.pem"
su - zimbra -c "/opt/zimbra/bin/zmcontrol start" su - zimbra -c "/opt/zimbra/bin/zmcontrol start"