{"id":38313,"date":"2019-10-31T22:22:55","date_gmt":"2019-10-31T19:22:55","guid":{"rendered":"https:\/\/prohoster.info\/blog\/kak-pravilno-nastroit-sni-v-zimbra-ose\/"},"modified":"2019-10-31T22:22:55","modified_gmt":"2019-10-31T19:22:55","slug":"kak-pravilno-nastroit-sni-v-zimbra-ose","status":"publish","type":"post","link":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/kak-pravilno-nastroit-sni-v-zimbra-ose","title":{"rendered":"Si t\u00eb konfiguroni sakt\u00eb SNI n\u00eb Zimbra OSE?","gt_translate_keys":[{"key":"rendered","format":"text"}]},"content":{"rendered":"

N\u00eb fillim t\u00eb shekullit t\u00eb 21-t\u00eb, nj\u00eb burim si adresat IPv4 ishte gati n\u00eb shterrje. Q\u00eb n\u00eb vitin 2011, IANA ndau pes\u00eb bloket e fundit \/8 nga hap\u00ebsira e saj e adresave p\u00ebr regjistruesit rajonal\u00eb t\u00eb internetit, dhe deri n\u00eb vitin 2017, adresat ishin shteruar edhe p\u00ebr ta. P\u00ebrgjigjja ndaj kriz\u00ebs fatale t\u00eb munges\u00ebs s\u00eb adresave IPv4 ishte jo vet\u00ebm shfaqja e protokollit IPv6, por edhe teknologjia SNI, e cila mund\u00ebsoi p\u00ebrmbajtjen e nj\u00eb numri t\u00eb madh t\u00eb faqeve t\u00eb internetit n\u00eb nj\u00eb adres\u00eb IPv4. Q\u00ebllimi i SNI \u00ebsht\u00eb se ky zgjatim u lejon klient\u00ebve gjat\u00eb procesit t\u00eb dor\u00ebzimit t\u00eb njoftojn\u00eb serverin emrin e faqes q\u00eb ata duan t\u00eb lidhen me t\u00eb. Kjo i lejon serverit t\u00eb ruaj\u00eb nj\u00eb num\u00ebr t\u00eb madh certifikatash, duke siguruar k\u00ebshtu funksionimin e shum\u00eb domain-eve n\u00eb nj\u00eb adres\u00eb IP. Tehnologjia SNI u b\u00eb ve\u00e7an\u00ebrisht e k\u00ebrkuar midis ofruesve t\u00eb SaaS p\u00ebr biznesin, t\u00eb cil\u00ebt mor\u00ebn mund\u00ebsin\u00eb p\u00ebr t\u00eb p\u00ebrmbushur praktikisht nj\u00eb num\u00ebr t\u00eb pakufizuar domain-esh pa u shqet\u00ebsuar p\u00ebr numrin e nevojsh\u00ebm t\u00eb adresave IPv4. Le t\u00eb shohim se si mund t\u00eb implementojm\u00eb mb\u00ebshtetje p\u00ebr SNI n\u00eb Zimbra Collaboration Suite Open-Source Edition.<\/p>\n

\"Si<\/a><\/noindex><\/p>\n

SNI funksionon n\u00eb t\u00eb gjitha versionet aktuale dhe mb\u00ebshtet\u00ebse t\u00eb Zimbra OSE. N\u00eb rastin kur Zimbra Open-Source funksionon n\u00eb nj\u00eb infrastruktur\u00eb multi-server, do t'ju nevojitet t\u00eb kryeni t\u00eb gjitha veprimet e m\u00ebsip\u00ebrme n\u00eb nyj\u00ebn me serverin Proxy t\u00eb Zimbra. P\u00ebrve\u00e7 k\u00ebsaj, do t'ju duhet \u00e7iftet p\u00ebrputh\u00ebse certifikat\u00eb+\u00e7el\u00ebs, si dhe zinxhir\u00eb besimi t\u00eb certifikatave nga qendra juaj e certificimit p\u00ebr \u00e7do domain q\u00eb d\u00ebshironi t\u00eb ruani n\u00eb adres\u00ebn tuaj IPv4. V\u00ebmendje, arsyeja e shumic\u00ebs d\u00ebrrmuese t\u00eb gabimeve gjat\u00eb konfigurimit t\u00eb SNI n\u00eb Zimbra OSE \u00ebsht\u00eb pik\u00ebrisht n\u00eb skedar\u00ebt jo t\u00eb sakt\u00eb me certifikatat. Prandaj, jeni t\u00eb mir\u00ebpritur t\u00eb kontrolloni gjith\u00e7ka me kujdes para instalimit t\u00eb tyre t\u00eb drejtp\u00ebrdrejt.<\/p>\n

Para s\u00eb gjithash, q\u00eb SNI t\u00eb funksionoj\u00eb si\u00e7 duhet, duhet t\u00eb jepni komand\u00ebn zmprov mcf zimbraReverseProxySNIEnabled TRUE<\/b> n\u00eb nyj\u00ebn me serverin proxy t\u00eb Zimbra, dhe m\u00eb pas t\u00eb rivendosni sh\u00ebrbimin Proxy duke p\u00ebrdorur komand\u00ebn\u00a0zmproxyctl restart<\/b>.<\/p>\n

T\u00eb fillojm\u00eb me krijimin e nj\u00eb emri domaini. Si shembull, do t\u00eb marrim domainin company.ru<\/b> dhe, pasi q\u00eb domeni \u00ebsht\u00eb krijuar tashm\u00eb, do t\u00eb p\u00ebrcaktojm\u00eb emrin e hostit virtual Zimbra dhe adres\u00ebn virtuale IP. V\u00ebmendje e ve\u00e7ant\u00eb duhet t'i kushtohet faktit se emri i hostit virtual Zimbra duhet t\u00eb p\u00ebrputhet me emrin q\u00eb p\u00ebrdoruesi duhet t\u00eb shkruaj\u00eb n\u00eb shiritin e shfletuesit p\u00ebr t\u00eb aksesuar domenin, si dhe t\u00eb p\u00ebrputhet me emrin e specifikuar n\u00eb certifikat\u00ebn. P\u00ebr shembull, le t\u00eb marrim si emrin e hostit virtual Zimbra mail.company.ru<\/b>, dhe si adres\u00eb virtuale IPv4 do t\u00eb p\u00ebrdorim adres\u00ebn 1.2.3.4<\/b>.<\/p>\n

Pas k\u00ebsaj, \u00ebsht\u00eb mjaft t\u00eb \u0648\u0627\u0631\u062f\u064a\u0646 komand\u00ebn zmprov md company.ru zimbraVirtualHostName mail.company.ru zimbraVirtualIPAddress 1.2.3.4<\/b>, p\u00ebr t\u00eb lidhur hostin virtual Zimbra me t\u00eb adres\u00eb IP<\/a>. V\u00ebmendje e ve\u00e7ant\u00eb duhet t'i kushtohet faktit se n\u00ebse serveri ndodhet pas NAT-it ose nj\u00eb firewall-i, duhet t\u00eb siguroheni q\u00eb t\u00eb gjitha k\u00ebrkesat p\u00ebr domenin t\u00eb shkojn\u00eb n\u00eb adres\u00ebn e jashtme t\u00eb lidhur me t\u00eb dhe jo n\u00eb adres\u00ebn e tij n\u00eb rrjetin lokal.<\/p>\n

Pasi t\u00eb gjitha k\u00ebto t\u00eb p\u00ebrfundojn\u00eb, mbetet vet\u00ebm t\u00eb verifikoni dhe p\u00ebrgatitni certifikatat e domenit p\u00ebr instalim, dhe pastaj t'i instaloni ato.<\/p>\n

N\u00ebse dh\u00ebnia e certifikat\u00ebs p\u00ebr domenin kaloi n\u00eb m\u00ebnyr\u00eb korrekte, duhet t\u00eb keni n\u00eb duar tre skedar\u00eb me certifikata: dy prej tyre p\u00ebrb\u00ebjn\u00eb zinxhir\u00ebt e certifikatave nga qendra juaj e certifikimit, dhe nj\u00eb \u00ebsht\u00eb vet\u00eb certifikata p\u00ebr domenin. P\u00ebr m\u00eb tep\u00ebr, duhet t\u00eb keni nj\u00eb skedar me \u00e7el\u00ebsin q\u00eb keni p\u00ebrdorur p\u00ebr t\u00eb marr\u00eb certifikat\u00ebn. Krijoni nj\u00eb folder t\u00eb ve\u00e7ant\u00eb \/tmp\/company.ru<\/b> dhe vendosni aty t\u00eb gjith\u00eb skedar\u00ebt e disponuesh\u00ebm me \u00e7el\u00ebsa dhe certifikata. N\u00eb p\u00ebrfundim, duhet t\u00eb rezultoj\u00eb di\u00e7ka si kjo:<\/p>\n

ls \/tmp\/company.ru\ncompany.ru.key\n company.ru.crt\n company.ru.root.crt\n company.ru.intermediate.crt<\/code><\/pre>\n
\nPas k\u00ebsaj, do t\u00eb bashkojm\u00eb zinxhir\u00ebt e certifikatave n\u00eb nj\u00eb skedar duke p\u00ebrdorur komand\u00ebn cat company.ru.root.crt company.ru.intermediate.crt >> company.ru_ca.crt<\/b> dhe do t\u00eb sigurohemi q\u00eb gjith\u00e7ka \u00ebsht\u00eb n\u00eb rregull me certifikatat p\u00ebrmes komand\u00ebs \/opt\/zimbra\/bin\/zmcertmgr verifycrt comm \/tmp\/company.ru\/company.ru.key \/tmp\/company.ru\/company.ru.crt \/tmp\/company.ru\/company.ru_ca.crt<\/b>. Pasi verifikimi i certifikatave dhe \u00e7el\u00ebsit t\u00eb jet\u00eb me sukses, mund t\u00eb vazhdoni me instalimin e tyre.<\/p>\n
P\u00ebr t\u00eb filluar instalimin, s\u00eb pari do t\u00eb bashkojm\u00eb certifikat\u00ebn p\u00ebr domenin dhe zinxhir\u00ebt e besuar nga qendrat e certifikimit n\u00eb nj\u00eb skedar t\u00eb vet\u00ebm. Kjo b\u00ebhet gjithashtu me komand\u00ebn e nj\u00ebjt\u00eb t\u00eb tipit\u00a0cat company.ru.crt company.ru_ca.crt >> company.ru.bundle<\/b>. Pas k\u00ebsaj, \u00ebsht\u00eb e nevojshme t\u00eb ekzekutoni komand\u00ebn p\u00ebr t\u00eb regjistruar t\u00eb gjitha certifikatat dhe \u00e7el\u00ebsin n\u00eb LDAP: \/opt\/zimbra\/libexec\/zmdomaincertmgr savecrt company.ru company.ru.bundle company.ru.key<\/b>, dhe pastaj t\u00eb instaloni certifikatat me komand\u00ebn \/opt\/zimbra\/libexec\/zmdomaincertmgr deploycrts<\/b>. Pas instalimit, certifikatat dhe \u00e7el\u00ebsi i domainit company.ru do t\u00eb ruhen n\u00eb dosjen \/opt\/zimbra\/conf\/domaincerts\/company.ru<\/b>.\u00a0<\/p>\n
Duke rip\u00ebrs\u00ebritur k\u00ebto veprime me emra t\u00eb ndrysh\u00ebm domainesh, por me nj\u00eb adres\u00eb IP t\u00eb nj\u00ebjt\u00eb, \u00ebsht\u00eb e mundur t\u00eb arrish t\u00eb hostosh disa qindra domain-e n\u00eb nj\u00eb adres\u00eb IPv4. N\u00eb k\u00ebt\u00eb m\u00ebnyr\u00eb, mund t\u00eb p\u00ebrdor\u00ebsh pa asnj\u00eb problem certifikatat nga qendrat m\u00eb t\u00eb ndryshme t\u00eb l\u00ebshimit. Mund t\u00eb kontrollosh sakt\u00ebsin\u00eb e t\u00eb gjitha veprimeve t\u00eb kryera n\u00eb \u00e7do shfletues, ku p\u00ebr \u00e7do em\u00ebr virtual hosti duhet t\u00eb shfaqet Certifikata SSL<\/a>.\u00a0<\/p>\n
P\u00ebr t\u00eb gjitha pyetjet q\u00eb lidhen me Zextras Suite mund t\u00eb kontaktoni P\u00ebrfaq\u00ebsuesin e kompanis\u00eb \"Zextras\", Ekaterina Triandafiliidi n\u00eb email katerina@zextras.com
\n
Burimi: habr.com<\/a><\/p>","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"excerpt":{"rendered":"
\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 21-\u0433\u043e \u0432\u0435\u043a\u0430 \u043d\u0430 \u0433\u0440\u0430\u043d\u0438 \u0438\u0441\u0442\u043e\u0449\u0435\u043d\u0438\u044f \u0442\u0430\u043a\u043e\u0439 \u0440\u0435\u0441\u0443\u0440\u0441, \u043a\u0430\u043a \u0430\u0434\u0440\u0435\u0441\u0430 IPv4. \u0415\u0449\u0435 \u0432 2011 \u0433\u043e\u0434\u0443 IANA \u0432\u044b\u0434\u0435\u043b\u0438\u043b\u0430 \u0440\u0435\u0433\u0438\u043e\u043d\u0430\u043b\u044c\u043d\u044b\u043c \u0438\u043d\u0442\u0435\u0440\u043d\u0435\u0442-\u0440\u0435\u0433\u0438\u0441\u0442\u0440\u0430\u0442\u043e\u0440\u0430\u043c \u043f\u043e\u0441\u043b\u0435\u0434\u043d\u0438\u0435 \u043f\u044f\u0442\u044c \u043e\u0441\u0442\u0430\u0432\u0448\u0438\u0445\u0441\u044f \u0431\u043b\u043e\u043a\u043e\u0432 \/8 \u0438\u0437 \u0441\u0432\u043e\u0435\u0433\u043e \u0430\u0434\u0440\u0435\u0441\u043d\u043e\u0433\u043e \u043f\u0440\u043e\u0441\u0442\u0440\u0430\u043d\u0441\u0442\u0432\u0430, \u0430 \u0443\u0436\u0435 \u0432 2017 \u0433\u043e\u0434\u0443 \u0430\u0434\u0440\u0435\u0441\u0430 \u0437\u0430\u043a\u043e\u043d\u0447\u0438\u043b\u0438\u0441\u044c \u0438 \u0443 \u043d\u0438\u0445. \u041e\u0442\u0432\u0435\u0442\u043e\u043c \u043d\u0430 \u043a\u0430\u0442\u0430\u0441\u0442\u0440\u043e\u0444\u0438\u0447\u0435\u0441\u043a\u0443\u044e \u043d\u0435\u0445\u0432\u0430\u0442\u043a\u0443 IPv4-\u0430\u0434\u0440\u0435\u0441\u043e\u0432 \u0441\u0442\u0430\u043b\u043e \u043d\u0435 \u0442\u043e\u043b\u044c\u043a\u043e \u043f\u043e\u044f\u0432\u043b\u0435\u043d\u0438\u0435 \u043f\u0440\u043e\u0442\u043e\u043a\u043e\u043b\u0430 IPv6, \u043d\u043e \u0438 \u0442\u0435\u0445\u043d\u043e\u043b\u043e\u0433\u0438\u0438 SNI, \u043a\u043e\u0442\u043e\u0440\u0430\u044f […]<\/p>\n","protected":false,"gt_translate_keys":[{"key":"rendered","format":"html"}]},"author":1,"featured_media":28761,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"footnotes":""},"categories":[688],"tags":[],"class_list":["post-38313","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-administrirovanie"],"aioseo_notices":[],"aioseo_head":"\n\t\t\n\t\n\t\n\t\n\t\n\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\t\t\n\n","aioseo_head_json":{"title":"\ud83e\udd47Si t\u00eb konfiguroni sakt\u00eb SNI n\u00eb Zimbra OSE? | ProHoster","description":"N\u00eb fillim t\u00eb shekullit t\u00eb 21-t\u00eb, burimi si adresat IPv4 \u00ebsht\u00eb n\u00eb prag t\u00eb shterimit.","canonical_url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/kak-pravilno-nastroit-sni-v-zimbra-ose","robots":"max-image-preview:large","keywords":"","webmasterTools":{"miscellaneous":""},"schema":null,"og:locale":"sq_AL","og:site_name":"ProHoster | \u041a\u0443\u043f\u0438\u0442\u044c \u043d\u0430\u0434\u0435\u0436\u043d\u044b\u0439 \u0445\u043e\u0441\u0442\u0438\u043d\u0433 \u0434\u043b\u044f \u0441\u0430\u0439\u0442\u043e\u0432 \u0441 \u0437\u0430\u0449\u0438\u0442\u043e\u0439 \u043e\u0442 DDoS, VPS VDS \u0441\u0435\u0440\u0432\u0435\u0440\u044b","og:type":"article","og:title":"\ud83e\udd47\u041a\u0430\u043a \u043f\u0440\u0430\u0432\u0438\u043b\u044c\u043d\u043e \u043d\u0430\u0441\u0442\u0440\u043e\u0438\u0442\u044c SNI \u0432 Zimbra OSE? | ProHoster","og:description":"\u0412 \u043d\u0430\u0447\u0430\u043b\u0435 21-\u0433\u043e \u0432\u0435\u043a\u0430 \u043d\u0430 \u0433\u0440\u0430\u043d\u0438 \u0438\u0441\u0442\u043e\u0449\u0435\u043d\u0438\u044f \u0442\u0430\u043a\u043e\u0439 \u0440\u0435\u0441\u0443\u0440\u0441, \u043a\u0430\u043a \u0430\u0434\u0440\u0435\u0441\u0430 IPv4.","og:url":"https:\/\/prohoster.info\/sq\/blog\/administrirovanie\/kak-pravilno-nastroit-sni-v-zimbra-ose","og:image":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:secure_url":"https:\/\/prohoster.info\/wp-content\/uploads\/2021\/11\/logo-350.jpg","og:image:width":350,"og:image:height":350,"article:published_time":"2019-10-31T19:22:55+00:00","article:modified_time":"2019-10-31T19:22:55+00:00","article:publisher":"https:\/\/www.facebook.com\/prohoster","article:author":"https:\/\/www.facebook.com\/prohoster"},"aioseo_meta_data":{"post_id":"38313","title":null,"description":null,"keywords":null,"keyphrases":null,"primary_term":null,"canonical_url":null,"og_title":null,"og_description":null,"og_object_type":"default","og_image_type":"default","og_image_url":null,"og_image_width":null,"og_image_height":null,"og_image_custom_url":null,"og_image_custom_fields":null,"og_video":null,"og_custom_url":null,"og_article_section":null,"og_article_tags":null,"twitter_use_og":false,"twitter_card":"default","twitter_image_type":"default","twitter_image_url":null,"twitter_image_custom_url":null,"twitter_image_custom_fields":null,"twitter_title":null,"twitter_description":null,"schema":{"blockGraphs":[],"customGraphs":[],"default":{"data":{"Article":[],"Course":[],"Dataset":[],"FAQPage":[],"Movie":[],"Person":[],"Product":[],"ProductReview":[],"Car":[],"Recipe":[],"Service":[],"SoftwareApplication":[],"WebPage":[]},"graphName":"","isEnabled":true},"graphs":[]},"schema_type":null,"schema_type_options":null,"pillar_content":false,"robots_default":true,"robots_noindex":false,"robots_noarchive":false,"robots_nosnippet":false,"robots_nofollow":false,"robots_noimageindex":false,"robots_noodp":false,"robots_notranslate":false,"robots_max_snippet":null,"robots_max_videopreview":null,"robots_max_imagepreview":"large","priority":null,"frequency":null,"local_seo":null,"seo_analyzer_scan_date":"2026-02-08 20:37:35","breadcrumb_settings":null,"limit_modified_date":false,"reviewed_by":null,"ai":null,"created":"2021-03-01 01:11:24","updated":"2026-02-08 20:37:35","focus_keyword":null,"additional_keywords":null,"truseo_locale":null},"gt_translate_keys":[{"key":"link","format":"url"}],"_links":{"self":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/38313","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/comments?post=38313"}],"version-history":[{"count":2,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/38313\/revisions"}],"predecessor-version":[{"id":157779,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/posts\/38313\/revisions\/157779"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media\/28761"}],"wp:attachment":[{"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/media?parent=38313"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/categories?post=38313"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/prohoster.info\/sq\/wp-json\/wp\/v2\/tags?post=38313"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}