But i have 3 questions 1- acme.sh script only handles cert issue and renew? i see it added crontab job 31 0 * * * "/root/.acme.sh"/acme.sh --cron --home "/root/.acme.sh" > /dev/null , so the cert will renew every 30 days, but i have to install manually, copy to zimbra folder and...

yvespires wrote:All good now, the problem was my ispconfig master/slave dns servers not working/reloading zone changes properly.

Awesome. Thanks for letting me know the proper fix.

Hey, i'm using acme.sh with dns_ispconfig API to generate cert for zimbra 8.8.9.GA.2055.UBUNTU16.64 and its failling [Sat Aug 4 09:41:24 BRT 2018] mail.yvespires.tk:Verify error:DNS problem: NXDOMAIN looking up TXT for _acme-challenge.mail.yvespires.tk if i add DNS entries by hand its works. bind z...

Ok, this pretty much sums up our experience with Zimbra so far. It doesn't seem like it's at the stage where it can be taken seriously. Sorry to put it like that. We do hope it will improve in the coming years. Did you contact zimbra support? Unfortunately, these are volunteer forums from the user ...

Tried as you suggested, but it says that domain is not found. Here's the zimbra@sub:~$ /opt/zimbra/libexec/zmdkimkeyutil -a -d domain.com -S sub.domain.com Domain domain.com not found. I am not sure if I've ever been more confused about getting anything work in ubuntu more than having to deal with ...

It has always been a source of confusion for me. I have a paid support contract and support refers me to a wiki page to solve the issue. Here is a recent example... See this thread: https://forums.zimbra.org/viewtopic.php?f=15&t=64514 ... The wiki page they sent me was at https://wiki.zimbra.com...

zimbra@sub:~$ /opt/zimbra/libexec/zmdkimkeyutil -a -S sub.domain.com but it keeps giving us a list of usage rather than the dkim. Can you please give me an example how exactly should I put this domain to make a dkim for a subdomain? Have you tried... $ /opt/zimbra/libexec/zmdkimkeyutil -a -d domain...

Does anyone know if Zimbra will support U2F or better yet FIDO 2 from the Fido alliance as one of the second factors at some point? I have a co-op student building us cheap u2f tokens for approx $4 each based on the u2fzero project and we are close to finished on the hardware side for her project. I...

I'll add my 2cents. Firewalls should not block every ICMP packet. If that is the standard configuration then one needs to verify and manually tune their stack ... but how would you know or anticipate the capability of every upstream router? Search for best practices with icmp and firewalls for a dee...

Looking at the perl script zmdkimkeyutil and it appears you missed the -S option. % ./zmdkimkeyutil -help Usage: ./zmdkimkeyutil [-a [-b]] [-q] [-r] [-s selector] [-S] [-u [-b]] [-d domain] -a: Add new key pair and selector for domain -b: Optional parameter specifying the number of bits for the new ...