Commercial CA questions
Apologies in advance that these may be more tomcat questions than Zimbra questions....
Both zimbra.domain.com and mail.domain.com are pointing to my server and both work fine with the self-signed cert.
I created a CSR on the Zimbra server, submitted it, and got a commercial cert from www.instantssl.com for mail.dyers.net.
The Zimbra hostname is zimbra.dyers.net.
As far as Zimbra/Tomcat are concerned, is it OK that the SSL cert name is different from the Zimbra hostname?
When I created the CSR I used the alias zimbra-gte instead of tomcat. Is there a way to get this to work even though I used a different alias? Or do I need to recreate the CSR and get a new cet?
I'm an idiot.
The hostnames names in question are:
I ended up re-doing it with the tomcat alias and the matching hostname. It works but not sure if I screwed something up with the CSR the first time or if one of these was necessary for it to work.
Anyhow - cert from www.instantssl.com worked flawlessly when I did it this way.
btw the server doesn't care what names are in the cert. other computers (mail clients, mta's) talking to the server over ssl will care.