How does one deprovision or remove domain certificates

Discuss your pilot or production implementation with other Zimbra admins or our engineers.
centrex
Posts: 3
Joined: Thu Aug 07, 2014 8:32 am

How does one deprovision or remove domain certificates

Postby centrex » Thu Nov 17, 2016 7:29 am

This article explains how to set domain specific certificates in a multi tenancy environment: https://wiki.zimbra.com/wiki/SSL_certificates_per_domain

Have been using this successfully since sometime around ZCS 8.0

Now on ZCS 8.7.1 and the need arose to REMOVE the domain certificate. I.e. when webmail.domain.com is visited the server's standard SSL certificate should be served instead of a domain specific one.

I am usually OK with Google but for the life of me cannot find any instructions on how to remove a domain certificate from a domain. zmdomaincertmgr only allows save and deploy.

I suspect there is a zmprov command I need to use to just tell it that this domain doesn't use a domain cert ?


tuandungtb89
Posts: 15
Joined: Mon Jul 11, 2016 11:23 am

Re: How does one deprovision or remove domain certificates

Postby tuandungtb89 » Thu Feb 23, 2017 1:58 am

I got the same, any body known how to remove SSL certificate with SNI?
janezek
Posts: 14
Joined: Sat Sep 13, 2014 1:06 am

Re: How does one deprovision or remove domain certificates

Postby janezek » Wed Mar 01, 2017 5:06 pm

to remove domain cert you need to run:

Code: Select all

su zimbra
zmprov md domain.com zimbraSSLCertificate ""
zmprov md domain.com zimbraSSLPrivateKey ""
zmprov md domain.com zimbraVirtualHostname ""
zmprov md domain.com zimbraVirtualIPAddress ""


to remove those attributes from LDAP and then:

Code: Select all

su zimbra
zmproxyctl restart


to rewrite config and restart nginx.

Best Regards,
Kristijan
tuandungtb89
Posts: 15
Joined: Mon Jul 11, 2016 11:23 am

Re: How does one deprovision or remove domain certificates

Postby tuandungtb89 » Wed Mar 01, 2017 5:10 pm

Thank you, I will do it

Return to “Administrators”

Who is online

Users browsing this forum: No registered users and 12 guests