ZImbra SSL certificate renew

My domain is: arsia.com.np

I am on the process of renew of ssl certificate for the zimbra…
I was following the zimbra’ guide bit i got stucked on the point of creation of the root certificate CA root X3…
it has given the link * https://www.identrust.com/certificates/trustid/root-download-x3.html
I have successfully generated the cert, chain, fullchain and the private key…
Please help me to generate the the chain.pem file and solve it soon…
Thanks in advance :slight_smile:

Funny, we were just discussing that yesterday :slight_smile:

Basically you want the “Root Certificate Download” link in the “TrustID X3” section. You’ll also need to use openssl to convert it to the correct format:

openssl pkcs7 -print_certs -in trustidrootx3_chain.p7b -inform der -out identrust.pem

You may or may not have to remove the ‘subject’ and ‘issuer’ lines from the top of the resulting identrust.pem file, I’m not sure if Zimbra will accept them or not.

If you want to try setting up automated renewal, this procedure has been confirmed as working by at least one person. The crt.sh link in there should also be valid (though obviously less authoritative) for downloading the IdenTrust root.


Thankyou Jmorahan…
I was stucked before… Finally, it worked for me… Hurray!!!

Thankyou for your soon reply again !! :slight_smile:

1 Like

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.