CaCert Certificate - Revision history

Roland at 10:59, 9 December 2013

2013-12-09T10:59:27Z

← Older revision		Revision as of 10:59, 9 December 2013
Line 6:		Line 6:
	mkdir -p /data/Cerificaten/CaCert		mkdir -p /data/Cerificaten/CaCert
	cd /data/Cerificaten/CaCert		cd /data/Cerificaten/CaCert
	/opt/zimbra/bin/zmcertmgr createcsr comm -new "/CN=*.breedveld.net/C=NL/O=Breedveld/OU=Breedveld" -subjectAltNames mail.breedveld.net		/opt/zimbra/bin/zmcertmgr createcsr comm -new -keysize 2048 "/CN=*.breedveld.net/C=NL/O=Breedveld/OU=Breedveld" -subjectAltNames mail.breedveld.net
	cat /opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp/current.csr		cat /opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp/current.csr
	(change the domain in your domain)		(change the domain in your domain)

Roland at 10:10, 9 December 2013

2013-12-09T10:10:26Z

← Older revision		Revision as of 10:10, 9 December 2013
Line 6:		Line 6:
	mkdir -p /data/Cerificaten/CaCert		mkdir -p /data/Cerificaten/CaCert
	cd /data/Cerificaten/CaCert		cd /data/Cerificaten/CaCert
	/opt/zimbra/bin/zmcertmgr createcsr comm -new "/CN=*.breedveld.net/C=NL/O=Breedveld/OU=Breedveld" -subjectAltNames ~~mailserver~~.breedveld.net		/opt/zimbra/bin/zmcertmgr createcsr comm -new "/CN=*.breedveld.net/C=NL/O=Breedveld/OU=Breedveld" -subjectAltNames mail.breedveld.net
	cat /opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp/current.csr		cat /opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp/current.csr
	(change the domain in your domain)		(change the domain in your domain)

Roland at 13:13, 17 September 2010

2010-09-17T13:13:06Z

← Older revision		Revision as of 13:13, 17 September 2010
Line 12:		Line 12:
	On the CaCert site, if you didn't do that already, register yourself and your domain.<br>		On the CaCert site, if you didn't do that already, register yourself and your domain.<br>
	<br>		<br>
	create on the CaCert site a new server certificate, with the above generated cert.<br>		<b>For renew certificates, from here</b><br>
			create or renew on the CaCert site a new server certificate, with the above generated cert.<br>
	<br>		<br>
	cut-and-paste the received certificate from the CaCert site in commercial.crt and place it in the right zimbra dir:		cut-and-paste the received certificate from the CaCert site in commercial.crt and place it in the right zimbra dir:

Roland at 13:13, 6 May 2010

2010-05-06T13:13:03Z

← Older revision		Revision as of 13:13, 6 May 2010
Line 85:		Line 85:
	Open this link in your browser		Open this link in your browser
	http://www.cacert.org/index.php?id=17		http://www.cacert.org/index.php?id=17
	click yes (~~twice~~) to add this certificate		click yes (3 screens) to add this certificate.
	check the bar, above in your browser, you should allow active-x for this site once.		during this action, check the bar above in your browser, it is possible that you should allow active-x access for this site once.

Roland at 13:03, 6 May 2010

2010-05-06T13:03:10Z

← Older revision		Revision as of 13:03, 6 May 2010
Line 81:		Line 81:
	certutil -d sql:$HOME/.pki/nssdb -A -t TC -n "CAcert.org" -i cacert-root.crt		certutil -d sql:$HOME/.pki/nssdb -A -t TC -n "CAcert.org" -i cacert-root.crt
	certutil -d sql:$HOME/.pki/nssdb -A -t TC -n "CAcert.org Class 3" -i cacert-class3.crt		certutil -d sql:$HOME/.pki/nssdb -A -t TC -n "CAcert.org Class 3" -i cacert-class3.crt

			'''Import CaCert root CA in single user Internet Explorer'''<br>
			Open this link in your browser
			http://www.cacert.org/index.php?id=17
			click yes (twice) to add this certificate
			check the bar, above in your browser, you should allow active-x for this site once.


	'''Import into Microsoft Windows for multiple users'''<br>		'''Import into Microsoft Windows for multiple users'''<br>

Roland at 12:49, 6 May 2010

2010-05-06T12:49:49Z

← Older revision		Revision as of 12:49, 6 May 2010
Line 82:		Line 82:
	certutil -d sql:$HOME/.pki/nssdb -A -t TC -n "CAcert.org Class 3" -i cacert-class3.crt		certutil -d sql:$HOME/.pki/nssdb -A -t TC -n "CAcert.org Class 3" -i cacert-class3.crt

	'''Import into Microsoft Windows for multiple users'''		'''Import into Microsoft Windows for multiple users'''<br>
	If you have more than one account on your computer you don't want to install the CAcert Root Certificate for every single user. Therefore you can manually import the CAcert Root Certificates into the Local Machine Store. This procedure works only for Microsoft programs (e.g. Internet Explorer and Outlook), so you will also need to import the certificate into non-Microsoft browsers and e-mail programs.		If you have more than one account on your computer you don't want to install the CAcert Root Certificate for every single user. Therefore you can manually import the CAcert Root Certificates into the Local Machine Store. This procedure works only for Microsoft programs (e.g. Internet Explorer and Outlook), so you will also need to import the certificate into non-Microsoft browsers and e-mail programs.
	Go to the CAcert Root Certificate website: http://www.cacert.org/index.php?id=3		Go to the CAcert Root Certificate website: http://www.cacert.org/index.php?id=3

Roland at 12:49, 6 May 2010

2010-05-06T12:49:23Z

← Older revision		Revision as of 12:49, 6 May 2010
Line 81:		Line 81:
	certutil -d sql:$HOME/.pki/nssdb -A -t TC -n "CAcert.org" -i cacert-root.crt		certutil -d sql:$HOME/.pki/nssdb -A -t TC -n "CAcert.org" -i cacert-root.crt
	certutil -d sql:$HOME/.pki/nssdb -A -t TC -n "CAcert.org Class 3" -i cacert-class3.crt		certutil -d sql:$HOME/.pki/nssdb -A -t TC -n "CAcert.org Class 3" -i cacert-class3.crt

			'''Import into Microsoft Windows for multiple users'''
			If you have more than one account on your computer you don't want to install the CAcert Root Certificate for every single user. Therefore you can manually import the CAcert Root Certificates into the Local Machine Store. This procedure works only for Microsoft programs (e.g. Internet Explorer and Outlook), so you will also need to import the certificate into non-Microsoft browsers and e-mail programs.
			Go to the CAcert Root Certificate website: http://www.cacert.org/index.php?id=3
			Download the 'Root Certificate' and the 'Intermediate Certificate' (choose either DER or PEM Format - it doesn't matter)
			Log in as an Administrator
			Click the windows Start button and choose Run
			Type MMC, then hit Enter
			From the new window open the File menu and choose Add/Remove Snap-in...
			Click the Add Button
			choose the certificates item from the listbox and click the Add Button
			choose the Computer Account radio button and click the Next Button
			choose the Local Computer radio button and click the Finish Button
			click the Close Button
			click the Ok Button
			expand the tree to view Trusted Root Certification Authorities node
			right click on the Trusted Root Certification Authorities
			find the All Tasks menu item then choose Import off that menu and click Next
			type in, or browse to the class 1 Root certificate you previously downloaded and click Next
			verify that the radio box labeled Place all certificates in the following store is checked and that text box says Trusted Root Certification Authorities
			click Next and then Finish. You should get a message saying the import was successful.
			right click on the Intermediate Certification Authorities
			find the All Tasks menu item then choose Import off that menu and click Next
			type in, or browse to the class 3 Intermediate certificate you previously downloaded and click Next
			verify that the radio box labeled Place all certificates in the following store is checked and that text box says Intermediate Certification Authorities
			click Next and then Finish. You should get a message saying the import was successful.

Roland at 13:56, 28 April 2010

2010-04-28T13:56:26Z

← Older revision		Revision as of 13:56, 28 April 2010
Line 14:		Line 14:
	create on the CaCert site a new server certificate, with the above generated cert.<br>		create on the CaCert site a new server certificate, with the above generated cert.<br>
	<br>		<br>
	~~put~~ the received ~~key~~ in commercial.crt and place it in the right zimbra dir:		cut-and-paste the received certificate from the CaCert site in commercial.crt and place it in the right zimbra dir:
	cp commercial.crt /opt/zimbra/ssl/zimbra/commercial/commercial.crt		cp commercial.crt /opt/zimbra/ssl/zimbra/commercial/commercial.crt

Roland at 13:47, 28 April 2010

2010-04-28T13:47:11Z

← Older revision		Revision as of 13:47, 28 April 2010
Line 10:		Line 10:
	(change the domain in your domain)		(change the domain in your domain)

	create on the CaCert site a server ~~sertificate~~, with the above generated cert.<br>		On the CaCert site, if you didn't do that already, register yourself and your domain.<br>
			<br>
			create on the CaCert site a new server certificate, with the above generated cert.<br>
			<br>
	put the received key in commercial.crt and place it in the right zimbra dir:		put the received key in commercial.crt and place it in the right zimbra dir:
	cp commercial.crt /opt/zimbra/ssl/zimbra/commercial/commercial.crt		cp commercial.crt /opt/zimbra/ssl/zimbra/commercial/commercial.crt

Roland at 13:45, 28 April 2010

2010-04-28T13:45:19Z

← Older revision		Revision as of 13:45, 28 April 2010
Line 3:		Line 3:
	create an CaCert account and domain in https://www.cacert.org		create an CaCert account and domain in https://www.cacert.org

	create ~~an wildcard~~ server ~~cert~~ in Zimbra (as root) :		create a server certificate for a wild-card domain in Zimbra (as root) :
	mkdir -p /data/Cerificaten/CaCert		mkdir -p /data/Cerificaten/CaCert
	cd /data/Cerificaten/CaCert		cd /data/Cerificaten/CaCert