Search found 78 matches

by myriad
Wed Apr 26, 2017 11:43 pm
Forum: Administrators
Topic: Another Letsencrypt method
Replies: 111
Views: 202814

Re: Another Letsencrypt method

I can taste it! Works verifies OK and returns: Valid certificate chain: zmail.myriad.ca.cer: OK..Observe ... did it verify - Hit Enter to Continue? But at the top there is an error: '/bin/cp: cannot create directory './.acme.sh': Permission denied Check permissions: CERT cp failed for /home/rick/.ac...
by myriad
Wed Apr 26, 2017 11:27 pm
Forum: Administrators
Topic: Another Letsencrypt method
Replies: 111
Views: 202814

Re: Another Letsencrypt method

I am using 8.7.0. The .acme.sh directory inside the /opt/letsencrypt directory is owned by root but has 755 permissions.
by myriad
Wed Apr 26, 2017 10:12 pm
Forum: Administrators
Topic: Another Letsencrypt method
Replies: 111
Views: 202814

Re: Another Letsencrypt method

Right. The ' exit '! Missed that. So my last question is does the script not do the certificate install or do I have to do it manually per the 2nd to last post? OK. Got it going with a few errors: /bin/cp: cannot create directory './.acme.sh': Permission denied /opt/letsencrypt/deploy-zimbra-letsenc...
by myriad
Wed Apr 26, 2017 7:40 pm
Forum: Administrators
Topic: Another Letsencrypt method
Replies: 111
Views: 202814

Re: Another Letsencrypt method

Thanks for the quick reply Jim. So should I just re-install acme using your 'deploy-zimbra-letsencrypt.sh' method and re-create new certificates? I originally created everything using the original blog post before you had created your script. Also, your deploy-zimbra-letsencrypt.sh won't run at all....
by myriad
Wed Apr 26, 2017 6:39 pm
Forum: Administrators
Topic: Another Letsencrypt method
Replies: 111
Views: 202814

Re: Another Letsencrypt method

Well I thought I was good to go but now when I manually try to renew (5 days early) I get the error: Challenge error: {"type":"urn:acme:error:malformed","detail":"Unable to update challenge :: response does not complete challenge","status": 404} . An...
by myriad
Thu Feb 02, 2017 5:08 pm
Forum: Administrators
Topic: How to obtain an A+ in the Qualys SSL Labs Security Test - Open Wiki
Replies: 31
Views: 6289

Re: How to obtain an A+ in the Qualys SSL Labs Security Test - Open Wiki

The version is in my sig. Actually, since I am running 8.7 I see Proxy is installed and running but I haven't configured it or anything yet. Would this be a good starting point for an existing server: https://wiki.zimbra.com/wiki/Enabling_Zimbra_Proxy_and_memcached? Here is my existing config (altho...
by myriad
Tue Jan 31, 2017 7:13 pm
Forum: Administrators
Topic: How to obtain an A+ in the Qualys SSL Labs Security Test - Open Wiki
Replies: 31
Views: 6289

Re: How to obtain an A+ in the Qualys SSL Labs Security Test - Open Wiki

Doesn't work for me! When I run the command as Zimbra: "zmdhparam -new 2048" I get: "Unknown option: new" and I'm afraid to go further (I'm not running proxy).
by myriad
Tue Jan 31, 2017 6:55 pm
Forum: Administrators
Topic: Another Letsencrypt method
Replies: 111
Views: 202814

Re: Another Letsencrypt method

Big thank you to JD for an excellent write up! Once I got the CAT mistake out of the way (it didn't copy the dashes properly) it worked perfectly. Can't wait for the web how to.
by myriad
Thu Jun 11, 2015 4:06 am
Forum: Administrators
Topic: Open relay problem
Replies: 21
Views: 1972

Open relay problem

I think a big part of my problem was that my router was not 1:1 masquerading properly. The NAT rule was not mapping one internal address to one external address correctly. I recently received a Mikrotik router for testing on a job I'm doing in a couple of weeks. The 1:1 nat was not configured co...
by myriad
Wed Jun 10, 2015 8:06 pm
Forum: Administrators
Topic: Open relay problem
Replies: 21
Views: 1972

Open relay problem

OK. Thanks to your help I have stopped the spam and closed the open relay. The only weird thing is that all the sender mail shows up as originating from my gateway. Spamcop gives me the message: Your email host does not appear to correctly identify the sending IP of the email you receive. The last a...

Go to advanced search