Zimbra Open Source Certificate Renew

If you encounter error on Zimbra Open Source certificate expiry, then just run the following lines:

1. Switch to Zimbra user
su - zimbra
2. Stop all the Zimbra services
zmcontrol stop
3. Get out from zimbra user.
exit
4. Begin by generating a new Certificate Authority (CA).
/opt/zimbra/bin/zmcertmgr createca -new
5. Then generate a certificate signed by the CA that expires in 365 days.
/opt/zimbra/bin/zmcertmgr createcrt -new -days 365
6. Next deploy the certificate.
/opt/zimbra/bin/zmcertmgr deploycrt self
7. Next deploy the CA.
/opt/zimbra/bin/zmcertmgr deployca
8. To finish, verify the certificate was deployed to all the services.
/opt/zimbra/bin/zmcertmgr viewdeployedcrt
9. Switch back to zimbra user
su - zimbra
10. Start all Zimbra services
zmcontrol start

Comments

Know your Lha Zha, Sog Zha, Shi Zha

There is believe in Buddhism, that an individual person have got their own lucky day and bad luck day in a week. They are derived from the twelve animals similar to chiness horscope. Your birth year tells you which Buddhism zodiac sign you below to. Lha Zha and Sog Zha are belived to be good day while Shi zha is consider bad day.

Remove Log files from Checkpoint

Here is how you can delete checkpoint old log files 1. Go to Gaia Terminal 2. Enter expert mode 3. echo $FWDIR to get the log file location 4. Go to the Log directory cd $FWDIR/log 5. rm 2013-10-01* to remove 1st Oct 2013 logs

IPTABLES

Under linux OS, we use iptables to secure the machine from any other external attack. In current scenario I am forwarding the packages from local interface to external interface and i have squid configured which will be acting as transparent proxy. Only selective port numbers are open for the network. 1. Save the script to a file. 2. Give permission to execute. chmod +x filename . 3. Execute the file as follows ./filename 4. save the output of the script to system iptables file, by running the command service iptables save 5. You are done, start/restart the iptables service. service iptables restart Script: #!/bin/sh # chmod +x file name to execute # eth0 LAN # eth1 WAN # Local IP range 192.168.0.0/25 # NATing # Transparent proxy iptables -F iptables -X iptables -t nat -F iptables -t nat -X iptables -t mangle -F iptables -t mangle -X iptables -P INPUT ACCEPT iptables -P FORWARD ACCEPT iptables -P OUTPUT ACCEPT iptables -A INPUT -i lo -j ACCEPT iptables -A...

Bhutan ICT

Search This Blog