I have installed Zimbra 7.0 Open Source edition for Ubuntu 10.4 LTS(64bit).
I created domain private key and certificate for my primary domain using StartSSL. I used this article to install the certification to my zimbra server (like mail.myprimarydomain.com).
It worked fine, and my primary domain is successfully using SSL.
Then I created another domain, and tried to install another StartSSL certificate to it using web gui, but without success. I have also created virtual host (like mail.mysecondarydomain.com) for my secondary domain.
I pasted my Domain Certificate + ca_bundle.crt (like commercial.crt in /opt/zimbra/ssl/zimbra/commercial/ , but with mysecondary domain certificate) and Domain Private Key to their textboxes.
No errors, but when I restart my zimbra using zmcontrol stop; zmcontrol start I get error from imapproxy:
Starting nginx...nginx: [emerg] SSL_CTX_use_certificate_chain_file("/opt/zimbra/conf/domaincerts/mysecondarydomain.com.crt") failed (SSL: error:02001002:system library:fopen:No such file or directory error:20074002:BIO routines:FILE_CTRL:system lib error:140DC002:SSL routines:SSL_CTX_use_certificate_chain_file:system lib)
I created mysecondarydomain.com.crt using my certificate and ca_bundle.crt.
After that I restarted the server and got another error:
Starting nginx...nginx: [emerg] SSL_CTX_use_PrivateKey_file("/opt/zimbra/conf/domaincerts/mysecondarydomain.com.key") failed (SSL: error:02001002:system library:fopen:No such file or directory error:20074002:BIO routines:FILE_CTRL:system lib error:140B0002:SSL routines:SSL_CTX_use_PrivateKey_file:system lib)
I created mysecondarydomain.com.key using my secondary domains private key.
After that the server restarted without errors, but when I go https://mail.mysecondarydomain.com I get certificate warning, saying my secondary domain is using my primary domains certificate. Login works without @mysecondarydomain.com, so virtual host is working.
If I have understood correctly, I should be able to use another SSL certificate for another domain. But I'm unable to get it working correctly.