{"id":38313,"date":"2019-10-31T22:22:55","date_gmt":"2019-10-31T19:22:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-pravilno-nastroit-sni-v-zimbra-ose\/"},"modified":"2019-10-31T22:22:55","modified_gmt":"2019-10-31T19:22:55","slug":"kak-pravilno-nastroit-sni-v-zimbra-ose","status":"publish","type":"post","link":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/kak-pravilno-nastroit-sni-v-zimbra-ose","title":{"rendered":"Kako ispravno postaviti SNI u Zimbra OSE?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

Na po\u010detku 21. stolje\u0107a do\u0161lo je do iscrpljenja resursa poput IPv4 adresa. Ve\u0107 2011. godine, IANA je dodijelila regionalnim internetskim registratorima posljednjih pet preostalih blokova \/8 iz svog adresnog prostora, a ve\u0107 2017. godine, adrese su se iscrpile i za njih. Odgovor na katastrofalni nedostatak IPv4 adresa nije bila samo pojava protokola IPv6, ve\u0107 i SNI tehnologija, koja je omogu\u0107ila smje\u0161taj ogromnog broja web stranica na jednoj IPv4 adresi. Bit SNI-a je u tome da ovo pro\u0161irenje omogu\u0107ava klijentima da tijekom handshakea obavijeste server o imenu web stranice s kojom se \u017eele povezati. To omogu\u0107ava serveru da pohranjuje brojne certifikate, a time omogu\u0107ava funkcioniranje vi\u0161e domena na jednoj IP adresi. Tehnologija SNI postala je posebno tra\u017eena me\u0111u SaaS pru\u017eateljima usluga za poslovanje, koji su dobili mogu\u0107nost smje\u0161taja prakti\u010dki neograni\u010denog broja domena bez brige o potrebnom broju IPv4 adresa. Saznajmo kako implementirati podr\u0161ku za SNI u Zimbra Collaboration Suite Open-Source Edition.<\/p>\n

\"Kako<\/a><\/noindex><\/p>\n

SNI radi u svim aktualnim i podr\u017eanim verzijama Zimbra OSE. U slu\u010daju da va\u0161a Zimbra Open-Source radi na multiservernoj infrastrukturi, bit \u0107e potrebno izvr\u0161iti sve dolje navedene radnje na \u010dvoru s instaliranim Zimbra Proxy serverom. Tako\u0111er \u0107e vam biti potrebne odgovaraju\u0107e parove certifikat + klju\u010d, kao i vjerodostojne lance certifikata od va\u0161eg certifikacijskog centra za svaku od domena koje \u017eelite smjestiti na svoj IPv4 adresu. Napominjemo da je uzrok velikog broja gre\u0161aka prilikom postavljanja SNI u Zimbra OSE upravo u neto\u010dnim datotekama s certifikatima. Stoga savjetujemo da sve temeljito provjerite prije nego \u0161to ih zapravo instalirate.<\/p>\n

Prvo, kako bi SNI normalno radio, potrebno je unijeti naredbu zmprov mcf zimbraReverseProxySNIEnabled TRUE<\/b> na \u010dvoru s Zimbra Proxy serverom, a zatim ponovno pokrenuti Proxy uslugu pomo\u0107u naredbe\u00a0zmproxyctl restart<\/b>.<\/p>\n

Zapo\u010dnimo stvaranjem domena. Za primjer \u0107emo uzeti domenu company.ru<\/b> Nakon \u0161to je domena stvorena, odredimo ime virtualnog hosta Zimbra i virtualnu IP adresu. Va\u017eno je da ime virtualnog hosta Zimbra odgovara imenu koje korisnik treba unijeti u adresnu traku preglednika za pristup domeni, a tako\u0111er se mora poklapati s imenom navedenim u certifikatu. Za primjer \u0107emo uzeti ime virtualnog hosta Zimbra mail.tvrtka.hr<\/b>, a kao virtualnu IPv4 adresu koristimo adresu 1.2.3.4<\/b>.<\/p>\n

Nakon toga dovoljno je unijeti naredbu zmprov md tvrtka.hr zimbraVirtualHostName mail.tvrtka.hr zimbraVirtualIPAddress 1.2.3.4<\/b>, kako bismo pridru\u017eili virtualni host Zimbra virtualnom IP-adresu<\/a>. Napominjemo da, ako se poslu\u017eitelj nalazi iza NAT-a ili vatrozida, treba osigurati da svi zahtjevi prema domeni idu upravo na vanjsku IP adresu koja je povezana s njom, a ne na njezinu adresu u lokalnoj mre\u017ei.<\/p>\n

Nakon \u0161to je sve zavr\u0161eno, preostaje samo provjeriti i pripremiti certifikate za domenu za instalaciju, a potom ih instalirati.<\/p>\n

Ako je izdavanje certifikata za domenu pro\u0161lo ispravno, trebali biste imati tri datoteke s certifikatima: dvije predstavljaju lance certifikata va\u0161eg certifikacijskog centra, a jedna je neposredni certifikat za domenu. Osim toga, trebali biste imati datoteku s klju\u010dem koji ste koristili za dobivanje certifikata. Stvorite zasebnu mapu \/tmp\/company.ru<\/b> i stavite sve datoteke s klju\u010devima i certifikatima tamo. Na kraju bi trebalo izgledati ovako:<\/p>\n

ls \/tmp\/tvrtka.hr\n\tvrstka.hr.key\n\tvrstka.hr.crt\n\tvrstka.hr.root.crt\n\tvrstka.hr.intermediate.crt<\/code><\/pre>\n
\nNakon toga spojit \u0107emo lance certifikata u jednu datoteku pomo\u0107u naredbe cat tvrtka.hr.root.crt tvrtka.hr.intermediate.crt >> tvrtka.hr_ca.crt<\/b> i provjeriti da su certifikati ispravni pomo\u0107u naredbe \/opt\/zimbra\/bin\/zmcertmgr verifycrt comm \/tmp\/company.ru\/company.ru.key \/tmp\/company.ru\/company.ru.crt \/tmp\/company.ru\/company.ru_ca.crt<\/b>. Nakon uspje\u0161ne provjere certifikata i klju\u010da, mo\u017eemo nastaviti s njihovom instalacijom.<\/p>\n
Da bismo zapo\u010deli instalaciju, prvo spojimo certifikat za domenu i povjerljive lance od certifikacijskih centara u jednu datoteku. To se tako\u0111er radi pomo\u0107u jedne naredbe oblika\u00a0cat tvrtka.hr.crt tvrtka.hr_ca.crt >> tvrtka.hr.bundle<\/b>. Nakon toga potrebno je izvr\u0161iti naredbu kako bismo upisali sve certifikate i klju\u010d u LDAP: \/opt\/zimbra\/libexec\/zmdomaincertmgr savecrt company.ru company.ru.bundle company.ru.key<\/b>, a zatim instalirati certifikate pomo\u0107u naredbe \/opt\/zimbra\/libexec\/zmdomaincertmgr deploycrts<\/b>. Nakon instalacije, certifikati i klju\u010devi za domenu company.ru bit \u0107e pohranjeni u mapi \/opt\/zimbra\/conf\/domaincerts\/company.ru<\/b>.\u00a0<\/p>\n
Ponovnim izvo\u0111enjem ovih akcija koriste\u0107i razli\u010dite domenske nazive, ali istu IP adresu, mo\u017eete posti\u0107i hostanje nekoliko stotina domena na jednoj IPv4 adresi. Tako\u0111er, mo\u017eete bez ikakvih problema koristiti certifikate od raznih centara za izdavanje. Ispravnost svih provedenih akcija mo\u017eete provjeriti u bilo kojem pregledniku, gdje bi za svaki virtualni naziv hosta trebao biti prikazan svoj SSL certifikat<\/a>.\u00a0<\/p>\n
Za sva pitanja vezana uz Zextras Suite mo\u017eete se obratiti predstavnici kompanije \u201eZextras\u201c Ekaterini Triandafiliidi putem e-po\u0161te katerina@zextras.com
\n
Izvor: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 21-\u0433\u043e \u0432\u0435\u043a\u0430 \u043d\u0430 \u0433\u0440\u0430\u043d\u0438 \u0438\u0441\u0442\u043e\u0449\u0435\u043d\u0438\u044f \u0442\u0430\u043a\u043e\u0439 \u0440\u0435\u0441\u0443\u0440\u0441, \u043a\u0430\u043a \u0430\u0434\u0440\u0435\u0441\u0430 IPv4. \u0415\u0449\u0435 \u0432 2011 \u0433\u043e\u0434\u0443 IANA \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0430 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u043c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0431\u043b\u043e\u043a\u043e\u0432 \/8 \u0438\u0437 \u0441\u0432\u043e\u0435\u0433\u043e \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430, \u0430 \u0443\u0436\u0435 \u0432 2017 \u0433\u043e\u0434\u0443 \u0430\u0434\u0440\u0435\u0441\u0430 \u0437\u0430\u043a\u043e\u043d\u0447\u0438\u043b\u0438\u0441\u044c \u0438 \u0443 \u043d\u0438\u0445. \u041e\u0442\u0432\u0435\u0442\u043e\u043c \u043d\u0430 \u043a\u0430\u0442\u0430\u0441\u0442\u0440\u043e\u0444\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043d\u0435\u0445\u0432\u0430\u0442\u043a\u0443 IPv4-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441\u0442\u0430\u043b\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 IPv6, \u043d\u043e \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 SNI, \u043a\u043e\u0442\u043e\u0440\u0430\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28761,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38313","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Kako ispravno postaviti SNI u Zimbri OSE? | ProHoster","description":"Na po\u010detku 21. stolje\u0107a, resurs poput IPv4 adresa bio je na rubu iscrpljenosti.","canonical_url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/kak-pravilno-nastroit-sni-v-zimbra-ose","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"hr_HR","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c SNI \u0432 Zimbra OSE? | ProHoster","og:description":"\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 21-\u0433\u043e \u0432\u0435\u043a\u0430 \u043d\u0430 \u0433\u0440\u0430\u043d\u0438 \u0438\u0441\u0442\u043e\u0449\u0435\u043d\u0438\u044f \u0442\u0430\u043a\u043e\u0439 \u0440\u0435\u0441\u0443\u0440\u0441, \u043a\u0430\u043a \u0430\u0434\u0440\u0435\u0441\u0430 IPv4.","og:url":"https:\/\/prohoster.info\/hr\/blog\/administrirovanie\/kak-pravilno-nastroit-sni-v-zimbra-ose","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:22:55+00:00","article:modified_time":"2019-10-31T19:22:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38313","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:37:35","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:11:24","updated":"2026-02-08 20:37:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/38313","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/comments?post=38313"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/38313\/revisions"}],"predecessor-version":[{"id":157779,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/posts\/38313\/revisions\/157779"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media\/28761"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/media?parent=38313"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/categories?post=38313"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/hr\/wp-json\/wp\/v2\/tags?post=38313"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}