Results 1 to 2 of 2

Thread: Different SSL certs for different hostnames for imap, https etc

Hybrid View

  1. #1
    Join Date
    Apr 2007
    Posts
    32
    Rep Power
    8

    Default Different SSL certs for different hostnames for imap, https etc

    Hi,

    Prior to using Zimbra we used service-based hostnames, i.e. imap.company.com, smtp.ixico.com, webmail.company.com. I would like to continue doing this but obviously this will cause some problems with the ssl certificates. I can sort out the postfix one, but the tomcat service ones are a problem. As far as I can see there are three options:

    1 - Configure tomcat to use separate certificates for the different services, based on the connection port - I don't think there's any (reasonably straight forward) way to do this though..?

    2 - Get a certificate with AlternativeNames for the other hostnames, but I can't see any reference to this in the forums or Wiki - would this work? If so how do I go about creating the csr?

    3 - Get a wildcard certificate. This seems the most likely to work but will be the most expensive. There are also issues with Windows mobile clients. If I just create the csr with cn= *.company.com will that work? I've seen a few references to this in the forums but no definite statement that it will be ok - I'd be grateful if someone could confirm.

    Are there any other ideas I haven't thought of?

    Thanks,
    Rob

  2. #2
    Join Date
    Apr 2007
    Posts
    32
    Rep Power
    8

    Default

    I've tried a CaCert wildcard certificate which seems to be ok. I'd be interested to know if anyone has tried the alternative name approach though...

    Rob

Similar Threads

  1. Seperate SSL Certs for pop/imap/smtp/web
    By Si1entDave in forum Administrators
    Replies: 2
    Last Post: 10-27-2007, 05:03 PM
  2. Enabling ssl on port 8081 for zimbra web login (https)
    By Vivek k c in forum Administrators
    Replies: 5
    Last Post: 08-23-2007, 12:30 AM
  3. Ssl Https
    By mrichman in forum Administrators
    Replies: 1
    Last Post: 01-11-2006, 05:14 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •