{"id":38313,"date":"2019-10-31T22:22:55","date_gmt":"2019-10-31T19:22:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-pravilno-nastroit-sni-v-zimbra-ose\/"},"modified":"2019-10-31T22:22:55","modified_gmt":"2019-10-31T19:22:55","slug":"kak-pravilno-nastroit-sni-v-zimbra-ose","status":"publish","type":"post","link":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-pravilno-nastroit-sni-v-zimbra-ose","title":{"rendered":"Kuidas seadistada SNI Zimbra OSE-s \u00f5igesti?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

21. sajandi alguses olid IPv4-aadressid peaaegu l\u00f5ppemas. Juba 2011. aastal eraldas IANA piirkondlikele interneti registreerijatele viimased viis allesj\u00e4\u00e4nud \/8 ploki oma aadressiruumist, ja 2017. aastaks olid need aadressid ka neile otsa saanud. Vastuseks katastroofilisele IPv4-aadresside puudusele tekkis mitte ainult IPv6 protokoll, vaid ka SNI tehnoloogia, mis v\u00f5imaldas mahutada tohutul hulgal veebisaite \u00fchele IPv4-aadressile. SNI idee seisneb selles, et see laiendus v\u00f5imaldab klientidel k\u00e4sitlemise protsessis serverile edastada veebisaidi nime, millega nad soovivad \u00fchendust luua. See v\u00f5imaldab serveril salvestada mitmeid sertifikaate, mis t\u00e4hendab, et paljusid domeene saab hallata \u00fchel IP-aadressil. SNI tehnoloogia on saanud eriti populaarseks SaaS-teenuse pakkujate seas, kes saavad praktikas majutada peaaegu piiramatu arvu domeene ilma vajaduseta muretseda vajalike IPv4-aadresside arvu p\u00e4rast. Uurime, kuidas on v\u00f5imalik SNI toetust rakendada Zimbra Collaboration Suite Open-Source Editionis.<\/p>\n

\"Kuidas<\/a><\/noindex><\/p>\n

SNI t\u00f6\u00f6tab k\u00f5igis n\u00fc\u00fcdisaegsetes ja toetatavates Zimbra OSE versioonides. Kui teie Zimbra avatud l\u00e4htekoodiga t\u00f6\u00f6tab mitme serveri infrastruktuuris, peate k\u00f5ik j\u00e4rgnevad toimingud tegema s\u00f5lmes, kus on installitud Zimbra Proxiserver. Lisaks on vajalikud vastavad sertifikaadi+v\u00f5tme paarid ja usaldusv\u00e4\u00e4rsed sertifikaadikettid teie sertifitseerimiskeskuselt iga domeeni jaoks, mille soovite hostida oma IPv4-aadressil. T\u00e4helepanu, et enamik SNI seadistamise vigu Zimbra OSE-s tuleneb just vale sertifikaadi failidest. Seet\u00f5ttu soovitame enne nende paigaldamist k\u00f5ik hoolikalt \u00fcle vaadata.<\/p>\n

Esiteks, et SNI korralikult t\u00f6\u00f6taks, tuleb sisestada j\u00e4rgmine k\u00e4sk zmprov mcf zimbraReverseProxySNIEnabled TRUE<\/b> Zimbra proxiserveriga s\u00f5lmes ja seej\u00e4rel taask\u00e4ivitada Proxy teenus j\u00e4rgmise k\u00e4suga\u00a0zmproxyctl restart<\/b>.<\/p>\n

Alustame domeeninime loomisega. N\u00e4iteks v\u00f5tame domeeni company.ru<\/b> Kui domeen on juba loodud, m\u00e4\u00e4rame Zimbra virtuaalse hosti nime ja virtuaalse IP-aadressi. Pange t\u00e4hele, et Zimbra virtuaalse hosti nimi peab vastama nimele, mille kasutaja peab sirvija aadressiribale sisestama, et domeenile juurde p\u00e4\u00e4seda, ning olema koosk\u00f5las sertifikaadis m\u00e4rgitud nimega. N\u00e4iteks v\u00f5tame Zimbra virtuaalse hosti nimeks mail.company.ru<\/b>, ja virtuaalse IPv4-aadressina kasutame aadressi 1.2.3.4<\/b>.<\/p>\n

P\u00e4rast seda piisab k\u00e4su sisestamisest zmprov md company.ru zimbraVirtualHostName mail.company.ru zimbraVirtualIPAddress 1.2.3.4<\/b>, et siduda Zimbra virtuaalne host virtuaalse IP-aadressi<\/a>. P\u00f6\u00f6rame t\u00e4helepanu sellele, et kui server asub NAT-i v\u00f5i tulem\u00fc\u00fcriga, tuleb tagada, et k\u00f5ik domeeni p\u00e4ringud suunatakse just sellele v\u00e4lisele IP-aadressile, mitte selle lokaalse v\u00f5rgu aadressile.<\/p>\n

Kui k\u00f5ik on valmis, tuleb vaid domeeni sertifikaadid kontrollida ja paigaldamiseks ette valmistada ning seej\u00e4rel need installida.<\/p>\n

Kui domeeni sertifikaadi v\u00e4ljastamine on aset leidnud, peaks teil olema k\u00e4es kolm sertifikaatide faili: kaks sertifikaatide ahelat teie sertifitseerimiskeskusest ning \u00fcks on otsene v\u00e4ljakuulutatud domeeni sertifikaat. Lisaks peaks teil olema fail v\u00f5tmega, mida kasutasite sertifikaadi saamiseks. Looge eraldi kaust \/tmp\/company.ru<\/b> ja paigutage sinna k\u00f5ik olemasolevad v\u00f5tmed ja sertifikaadifailid. L\u00f5pptulemusena peaks see v\u00e4lja n\u00e4gema umbes selline:<\/p>\n

ls \/tmp\/company.ru\ncompany.ru.key\n\u00a0company.ru.crt\n\u00a0company.ru.root.crt\n\u00a0company.ru.intermediate.crt<\/code><\/pre>\n
\nSeej\u00e4rel \u00fchendame sertifikaadi ahelad \u00fcheks failiks k\u00e4su abil cat company.ru.root.crt company.ru.intermediate.crt >> company.ru_ca.crt<\/b> ja veendume, et sertifikaatidega on k\u00f5ik korras k\u00e4su abil \/opt\/zimbra\/bin\/zmcertmgr verifycrt comm \/tmp\/company.ru\/company.ru.key \/tmp\/company.ru\/company.ru.crt \/tmp\/company.ru\/company.ru_ca.crt<\/b>. Kui sertifikaatide ja v\u00f5tme kontrollimine on edukas, saame alustada nende installimist.<\/p>\n
Installimise alustamiseks \u00fchendame esmalt domeeni sertifikaadi ja sertifitseerimiskeskuste usaldusv\u00e4\u00e4rsed ahelad \u00fcheks failiks. See toimub samuti \u00fche k\u00e4su abil, mis on kujul\u00a0cat company.ru.crt company.ru_ca.crt >> company.ru.bundle<\/b>. P\u00e4rast seda tuleb k\u00e4ivitada k\u00e4sk, et salvestada k\u00f5ik sertifikaadid ja v\u00f5tmed LDAP-i: \/opt\/zimbra\/libexec\/zmdomaincertmgr savecrt company.ru company.ru.bundle company.ru.key<\/b>, seej\u00e4rel installige sertifikaadid k\u00e4su abil \/opt\/zimbra\/libexec\/zmdomaincertmgr deploycrts<\/b>. P\u00e4rast installimist j\u00e4\u00e4vad sertifikaadid ja domeeni company.ru v\u00f5ti kausta \/opt\/zimbra\/conf\/domaincerts\/company.ru<\/b>.\u00a0<\/p>\n
Korrates neid samme erinevate domeeninimede ja sama IP-aadressiga, on v\u00f5imalik paigutada sadu domeene \u00fchele IPv4-aadressile. Samuti saab probleemideta kasutada sertifikaate erinevatelt v\u00e4ljaandjatelt. K\u00f5ik tehtud toimingute \u00f5igsust saab kontrollida igas brauseris, kus iga virtuaalse hostinime korral peaks kuvatama oma SSL-sertifikaat<\/a>.\u00a0<\/p>\n
K\u00fcsimuste korral, mis on seotud Zextras Suite'iga, v\u00f5ite p\u00f6\u00f6rduda Zextra esindaja Ekaterina Triandafiliidi poole e-posti teel katerina@zextras.com
\n
Allikas: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 21-\u0433\u043e \u0432\u0435\u043a\u0430 \u043d\u0430 \u0433\u0440\u0430\u043d\u0438 \u0438\u0441\u0442\u043e\u0449\u0435\u043d\u0438\u044f \u0442\u0430\u043a\u043e\u0439 \u0440\u0435\u0441\u0443\u0440\u0441, \u043a\u0430\u043a \u0430\u0434\u0440\u0435\u0441\u0430 IPv4. \u0415\u0449\u0435 \u0432 2011 \u0433\u043e\u0434\u0443 IANA \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0430 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u043c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0431\u043b\u043e\u043a\u043e\u0432 \/8 \u0438\u0437 \u0441\u0432\u043e\u0435\u0433\u043e \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430, \u0430 \u0443\u0436\u0435 \u0432 2017 \u0433\u043e\u0434\u0443 \u0430\u0434\u0440\u0435\u0441\u0430 \u0437\u0430\u043a\u043e\u043d\u0447\u0438\u043b\u0438\u0441\u044c \u0438 \u0443 \u043d\u0438\u0445. \u041e\u0442\u0432\u0435\u0442\u043e\u043c \u043d\u0430 \u043a\u0430\u0442\u0430\u0441\u0442\u0440\u043e\u0444\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043d\u0435\u0445\u0432\u0430\u0442\u043a\u0443 IPv4-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441\u0442\u0430\u043b\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 IPv6, \u043d\u043e \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 SNI, \u043a\u043e\u0442\u043e\u0440\u0430\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28761,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38313","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kuidas seadistada SNI Zimbra OSE-s \u00f5igesti? | ProHoster","description":"21. sajandi alguses olid IPv4-aadressid otsakorral. Juba 2011. aastal eraldas IANA viimased viis allesolevat \/8 plokki piirkondlikele interneti registritele ning 2017. aastaks olid ka neil aadressid otsa saanud. Vastuseks IPv4-aadresside katastroofilisele puudusele ei tulnud mitte ainult IPv6 protokolli loomine, vaid ka tehnoloogia SNI, mis","canonical_url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-pravilno-nastroit-sni-v-zimbra-ose","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"et_EE","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c SNI \u0432 Zimbra OSE? | ProHoster","og:description":"\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 21-\u0433\u043e \u0432\u0435\u043a\u0430 \u043d\u0430 \u0433\u0440\u0430\u043d\u0438 \u0438\u0441\u0442\u043e\u0449\u0435\u043d\u0438\u044f \u0442\u0430\u043a\u043e\u0439 \u0440\u0435\u0441\u0443\u0440\u0441, \u043a\u0430\u043a \u0430\u0434\u0440\u0435\u0441\u0430 IPv4. \u0415\u0449\u0435 \u0432 2011 \u0433\u043e\u0434\u0443 IANA \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0430 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u043c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0431\u043b\u043e\u043a\u043e\u0432 \/8 \u0438\u0437 \u0441\u0432\u043e\u0435\u0433\u043e \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430, \u0430 \u0443\u0436\u0435 \u0432 2017 \u0433\u043e\u0434\u0443 \u0430\u0434\u0440\u0435\u0441\u0430 \u0437\u0430\u043a\u043e\u043d\u0447\u0438\u043b\u0438\u0441\u044c \u0438 \u0443 \u043d\u0438\u0445. \u041e\u0442\u0432\u0435\u0442\u043e\u043c \u043d\u0430 \u043a\u0430\u0442\u0430\u0441\u0442\u0440\u043e\u0444\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043d\u0435\u0445\u0432\u0430\u0442\u043a\u0443 IPv4-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441\u0442\u0430\u043b\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 IPv6, \u043d\u043e \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 SNI, \u043a\u043e\u0442\u043e\u0440\u0430\u044f","og:url":"https:\/\/prohoster.info\/et\/blog\/administrirovanie\/kak-pravilno-nastroit-sni-v-zimbra-ose","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:22:55+00:00","article:modified_time":"2019-10-31T19:22:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38313","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:37:35","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:11:24","updated":"2026-02-08 20:37:35"},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38313","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/comments?post=38313"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38313\/revisions"}],"predecessor-version":[{"id":157779,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/posts\/38313\/revisions\/157779"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media\/28761"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/media?parent=38313"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/categories?post=38313"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/et\/wp-json\/wp\/v2\/tags?post=38313"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}