{"id":4403,"date":"2018-03-24T21:21:57","date_gmt":"2018-03-25T00:21:57","guid":{"rendered":"https:\/\/blog.clusterweb.com.br\/?p=4403"},"modified":"2018-03-24T21:26:07","modified_gmt":"2018-03-25T00:26:07","slug":"zimbra-instalando-un-certificado-gratuito-ssl-lets-encrypt","status":"publish","type":"post","link":"https:\/\/blog.clusterweb.com.br\/?p=4403","title":{"rendered":"Zimbra: Instalando un Certificado gratuito SSL Let\u2019s Encrypt"},"content":{"rendered":"<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-8931 jetpack-lazy-image--handled\" src=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-es.png\" sizes=\"auto, (max-width: 1650px) 100vw, 1650px\" srcset=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-es.png 1650w, https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-es-300x55.png 300w, https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-es-700x129.png 700w\" alt=\"letsencrypt-es\" width=\"1650\" height=\"304\" data-attachment-id=\"8931\" data-permalink=\"https:\/\/www.jorgedelacruz.es\/2015\/12\/09\/zimbra-instalando-un-certificado-gratuito-ssl-lets-encrypt\/letsencrypt-es\/#main\" data-orig-file=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-es.png\" data-orig-size=\"1650,304\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"letsencrypt-es\" data-image-description=\"\" data-medium-file=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-es-300x55.png\" data-large-file=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-es-700x129.png\" data-lazy-loaded=\"1\" \/>Saludos, Let\u2019s Encrypt ha lanzado su Beta hace unos d\u00edas, llevaba siguiendo el proyecto desde hace unos meses, y parece que por f\u00edn est\u00e1 casi listo.<\/p>\n<h2>\u00bfQu\u00e9 es Let\u2019s Encrypt?<\/h2>\n<p>Let\u2019s Encrypt es una nueva Entidad Certificadora, es gratis, automatizada y adem\u00e1s abierta. Es una buena opci\u00f3n para proteger entornos Zimbra con un Certificado SSL profesional, a coste cero. Hay que tener en cuenta que por ahora se encuentra en estado Beta, y pueden surgir problemas, o incidencias, usarlo siempre bajo vuestra responsabilidad.<\/p>\n<p>Para seguir el proyecto de cerca por favor ir a la web Oficial del Proyecto \u2013\u00a0<a class=\"external free\" href=\"https:\/\/letsencrypt.org\/\" rel=\"nofollow\">https:\/\/letsencrypt.org<\/a>. Adem\u00e1s, siempre es bueno leer las\u00a0<a href=\"https:\/\/community.letsencrypt.org\/t\/frequently-asked-questions-faq\/26#topic-title\" target=\"_blank\" rel=\"noopener\">preguntas y respuestas frecuentes<\/a><\/p>\n<p><!--more--><\/p>\n<h2><span id=\"Installing_Let.27s_Encrypt_on_our_Zimbra_Server\" class=\"mw-headline\">Instalar Let\u2019s Encrypt en nuestro servidor Zimbra<br \/>\n<\/span><\/h2>\n<p>Let\u2019s Encrypt debe ser instalado en una m\u00e1quina Linux para obtener el Certificado SSL, la CA intermedia, y la Private Key, no requiere que sea en el servidor Zimbra, pero si usamos el servidor Zimbra, ser\u00e1 m\u00e1s f\u00e1cil posteriormente hacer la renovaci\u00f3n y ahorrar tiempo.<\/p>\n<p>El primero paso ser\u00e1 detener el servicio de nginx o de jetty, ya que Let\u00b4s Encrypt se comunica usando el puerto 443 para generar el Certificado SSL.<\/p>\n<pre class=\"ruby\"><code>zmproxyctl stop\r\nzmmailboxdctl stop<\/code><\/pre>\n<p>El segundo paso ser\u00e1 instalar git en nuestro servidor (apt-get install git\/yum install git) y clonar el proyecto letsencrypt en la carpeta que deseemos<\/p>\n<ul>\n<li>Nota: En RedHat\/CentOS 6 necesitas habilitar los repositorios EPEL antes de instalar letsencrypt.<\/li>\n<\/ul>\n<pre class=\"ruby\"><code>git clone <a class=\"external free\" href=\"https:\/\/github.com\/letsencrypt\/letsencrypt\" rel=\"nofollow\">https:\/\/github.com\/letsencrypt\/letsencrypt<\/a>\r\ncd letsencrypt<\/code><\/pre>\n<p>En este ejemplo, vamos a ejecutar Let\u2019s Encrypt de manera autom\u00e1tica, y usar la opci\u00f3n de certonly, la cual nos generar\u00e1 los ficheros que necesitamos para despu\u00e9s instalarlos en Zimbra<\/p>\n<pre class=\"ruby\"><code>root@zimbra86:~\/tmp\/letsencrypt# .\/letsencrypt-auto certonly<\/code><\/pre>\n<p>La primera vez que ejecutamos el entorno letsencrypt descargar\u00e1 las dependencias necesarias de los repositorios, puede durar unos minutos<\/p>\n<pre class=\"ruby\"><code>Creating virtual environment...\r\nUpdating letsencrypt and virtual environment dependencies.....\/root\/.local\/share\/letsencrypt\/local\/lib\/python2.7\/site-packages\/pip\/_vendor\/requests\/packages\/urllib3\/util\/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https:\/\/urllib3.readthedocs.org\/en\/latest\/security.html#insecureplatformwarning.\r\n  InsecurePlatformWarning\r\n.\/root\/.local\/share\/letsencrypt\/local\/lib\/python2.7\/site-packages\/pip\/_vendor\/requests\/packages\/urllib3\/util\/ssl_.py:90: InsecurePlatformWarning: A true SSLContext object is not available. This prevents urllib3 from configuring SSL appropriately and may cause certain SSL connections to fail. For more information, see https:\/\/urllib3.readthedocs.org\/en\/latest\/security.html#insecureplatformwarning.\r\n  InsecurePlatformWarning\r\n<\/code><\/pre>\n<p>El proceso nos preguntar\u00e1 por una direcci\u00f3n Email para usar en caso de emergencia o recuperar una Private Key en caso necesario<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-8926 jetpack-lazy-image--handled\" src=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-002.png\" sizes=\"auto, (max-width: 508px) 100vw, 508px\" srcset=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-002.png 508w, https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-002-300x90.png 300w\" alt=\"letsencrypt-002\" width=\"508\" height=\"153\" data-attachment-id=\"8926\" data-permalink=\"https:\/\/www.jorgedelacruz.es\/2015\/12\/09\/zimbra-instalando-un-certificado-gratuito-ssl-lets-encrypt\/letsencrypt-002\/#main\" data-orig-file=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-002.png\" data-orig-size=\"508,153\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"letsencrypt-002\" data-image-description=\"\" data-medium-file=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-002-300x90.png\" data-large-file=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-002.png\" data-lazy-loaded=\"1\" \/><\/p>\n<p>El proceso nos preguntar\u00e1 tambi\u00e9n si estamos de acuerdo con las Condiciones de Uso<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-8925 jetpack-lazy-image--handled\" src=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-003.png\" sizes=\"auto, (max-width: 512px) 100vw, 512px\" srcset=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-003.png 512w, https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-003-300x180.png 300w\" alt=\"letsencrypt-003\" width=\"512\" height=\"307\" data-attachment-id=\"8925\" data-permalink=\"https:\/\/www.jorgedelacruz.es\/2015\/12\/09\/zimbra-instalando-un-certificado-gratuito-ssl-lets-encrypt\/letsencrypt-003\/#main\" data-orig-file=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-003.png\" data-orig-size=\"512,307\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"letsencrypt-003\" data-image-description=\"\" data-medium-file=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-003-300x180.png\" data-large-file=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-003.png\" data-lazy-loaded=\"1\" \/><\/p>\n<ul>\n<li>Nota: En caso de renovaci\u00f3n del SSL, el proceso solamente tomar\u00e1 unos segundos, veremos algo parecido a lo siguiente<\/li>\n<\/ul>\n<pre class=\"ruby\"><code>Updating letsencrypt and virtual environment dependencies.......\r\nRunning with virtualenv: \/root\/.local\/share\/letsencrypt\/bin\/letsencrypt certonly<\/code><\/pre>\n<p>El \u00faltimo paso es introducir el FQDN que queremos proteger, en mi caso es zimbra86.zimbra.io:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-8924 jetpack-lazy-image--handled\" src=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-004.png\" sizes=\"auto, (max-width: 504px) 100vw, 504px\" srcset=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-004.png 504w, https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-004-300x83.png 300w\" alt=\"letsencrypt-004\" width=\"504\" height=\"140\" data-attachment-id=\"8924\" data-permalink=\"https:\/\/www.jorgedelacruz.es\/2015\/12\/09\/zimbra-instalando-un-certificado-gratuito-ssl-lets-encrypt\/letsencrypt-004\/#main\" data-orig-file=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-004.png\" data-orig-size=\"504,140\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"letsencrypt-004\" data-image-description=\"\" data-medium-file=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-004-300x83.png\" data-large-file=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-004.png\" data-lazy-loaded=\"1\" \/><\/p>\n<p>El proceso tarda unos segundos y terminar\u00e1 de la siguiente manera:<\/p>\n<pre class=\"ruby\"><code>IMPORTANT NOTES:\r\n - Congratulations! Your certificate and chain have been saved at\r\n   \/etc\/letsencrypt\/live\/zimbra86.zimbra.io\/fullchain.pem. Your cert\r\n   will expire on 2016-03-04. To obtain a new version of the\r\n   certificate in the future, simply run Let's Encrypt again.\r\n - If like Let's Encrypt, please consider supporting our work by:\r\n\r\n   Donating to ISRG \/ Let's Encrypt:   https:\/\/letsencrypt.org\/donate\r\n   Donating to EFF:                    https:\/\/eff.org\/donate-le<\/code><\/pre>\n<h3><span id=\"Where_are_the_SSL_Certificate_Files.3F\" class=\"mw-headline\">\u00bfDonde est\u00e1 el Certificado SSL?<br \/>\n<\/span><\/h3>\n<p>Podemos encontrar todos los Certificados SSL en la siguiente ruta\u00a0<b>\/etc\/letsencrypt\/live\/$domain<\/b>, donde $domain es el fqdn usado durante el proceso:<\/p>\n<pre class=\"ruby\"><code>root@zimbra86:\/etc\/letsencrypt\/live\/zimbra86.zimbra.io# ls -al\r\ntotal 8\r\ndrwxr-xr-x 2 root root 4096 Dec  5 16:46 .\r\ndrwx------ 3 root root 4096 Dec  5 16:46 ..\r\nlrwxrwxrwx 1 root root   42 Dec  5 16:46 cert.pem -&gt; ..\/..\/archive\/zimbra86.zimbra.io\/cert1.pem\r\nlrwxrwxrwx 1 root root   43 Dec  5 16:46 chain.pem -&gt; ..\/..\/archive\/zimbra86.zimbra.io\/chain1.pem\r\nlrwxrwxrwx 1 root root   47 Dec  5 16:46 fullchain.pem -&gt; ..\/..\/archive\/zimbra86.zimbra.io\/fullchain1.pem\r\nlrwxrwxrwx 1 root root   45 Dec  5 16:46 privkey.pem -&gt; ..\/..\/archive\/zimbra86.zimbra.io\/privkey1.pem<\/code><\/pre>\n<h3><span id=\"Build_the_proper_Intermediate_CA_plus_Root_CA\" class=\"mw-headline\">Construyendo el fichero con el Intermediate CA y el Root CA especial para Zimbra<br \/>\n<\/span><\/h3>\n<p>Let\u2019s Encrypt es casi perfecto, pero eso no quita que Zimbra tenga su particular manera de aceptar los Certificados SSL, donde necesitamos un fichero con las Intermediate CA y el Root CA, Let\u2019s Encrypt ya nos genera el chain.pem donde se encuentra el Intermediate CA, pero necesitamos adem\u00e1s a\u00f1adir el root despu\u00e9s del Intermediate:<\/p>\n<ul>\n<li><a class=\"external free\" href=\"https:\/\/www.identrust.com\/certificates\/trustid\/root-download-x3.html\" rel=\"nofollow\">https:\/\/www.identrust.com\/certificates\/trustid\/root-download-x3.html<\/a><\/li>\n<\/ul>\n<p>Vuestro fichero chain.pem debe ser algo como lo siguiente:<\/p>\n<pre class=\"ruby\"><code>-----BEGIN CERTIFICATE-----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\r\nf1w8DdnkabOLGeOVcj9LQ+s67vBykx4anTjURkbqZslUEUsn2k5xeua2zUk=\r\n-----END CERTIFICATE-----\r\n-----BEGIN CERTIFICATE-----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\r\nOb8VZRzI9neWagqNdwvYkQsEjgfbKbYK7p2CNTUQ\r\n-----END CERTIFICATE-----<\/code><\/pre>\n<h2><span id=\"Verify_your_commercial_certificate.\" class=\"mw-headline\">Verificando el Certificado SSL con Zimbra<br \/>\n<\/span><\/h2>\n<p>Nos moveremos ahora a la carpeta donde tenemos todos los ficheros para operar m\u00e1s r\u00e1pido, recordar\u00a0<b>\/etc\/letsencrypt\/live\/$domain<\/b>\u00a0y lanzaremos el siguiente comando c\u00f3mo\u00a0<b>root<\/b>:<\/p>\n<pre class=\"ruby\"><code>root@zimbra86:\/etc\/letsencrypt\/live\/zimbra86.zimbra.io# \/opt\/zimbra\/bin\/zmcertmgr verifycrt comm privkey.pem cert.pem chain.pem\r\nVerifying cert.pem against privkey.pem\r\nCertificate (cert.pem) and private key (privkey.pem) match. Valid Certificate: cert.pem: OK<\/code><\/pre>\n<h2><span id=\"Deploy_the_new_Let.27s_Encrypt_SSL_certificate\" class=\"mw-headline\">Desplegar el Certificado SSL Let\u2019s Encrypt SSL<br \/>\n<\/span><\/h2>\n<h3>Copiar la private key en el directorio adecuado de Zimbra<\/h3>\n<p>Antes de desplegar el Certificado SSL, debemos hacer este peque\u00f1o truco para copiar la privatekey que ha generado Let\u2019s Encrypt en la ruta donde Zimbra guarda el SSL commercial:<\/p>\n<pre class=\"ruby\"><code>cp \/etc\/letsencrypt\/live\/zimbra86.zimbra.io\/privkey.pem \/opt\/zimbra\/ssl\/zimbra\/commercial\/commercial.key<\/code><\/pre>\n<p>Y ahora ya podemos lanzar el comando,\u00a0<strong>c\u00f3mo root en Zimbra 8.6, y como user zimbra desde Zimbra 8.7 en adelante<\/strong>, para instalar el Certificado SSL:<\/p>\n<pre class=\"ruby\"><code>root@zimbra86:\/etc\/letsencrypt\/live\/zimbra86.zimbra.io# \/opt\/zimbra\/bin\/zmcertmgr deploycrt comm cert.pem chain.pem \r\n** Verifying cert.pem against \/opt\/zimbra\/ssl\/zimbra\/commercial\/commercial.key\r\nCertificate (cert.pem) and private key (\/opt\/zimbra\/ssl\/zimbra\/commercial\/commercial.key) match.\r\nValid Certificate: cert.pem: OK\r\n** Copying cert.pem to \/opt\/zimbra\/ssl\/zimbra\/commercial\/commercial.crt\r\n** Appending ca chain chain.pem to \/opt\/zimbra\/ssl\/zimbra\/commercial\/commercial.crt\r\n** Importing certificate \/opt\/zimbra\/ssl\/zimbra\/commercial\/commercial_ca.crt to CACERTS as zcs-user-commercial_ca...done.\r\n** NOTE: mailboxd must be restarted in order to use the imported certificate.\r\n** Saving server config key zimbraSSLCertificate...failed.\r\n** Saving server config key zimbraSSLPrivateKey...failed.\r\n** Installing mta certificate and key...done.\r\n** Installing slapd certificate and key...done.\r\n** Installing proxy certificate and key...done.\r\n** Creating pkcs12 file \/opt\/zimbra\/ssl\/zimbra\/jetty.pkcs12...done.\r\n** Creating keystore file \/opt\/zimbra\/mailboxd\/etc\/keystore...done.\r\n** Installing CA to \/opt\/zimbra\/conf\/ca...done.<\/code><\/pre>\n<p>Y ya solamente nos queda reiniciar los servicios de Zimbra para que los cambios se apliquen correctamente y tengamos nuestro Certificado SSL<\/p>\n<pre class=\"ruby\"><code>zmcontrol restart<\/code><\/pre>\n<h2><span id=\"Test_the_new_SSL_Certificate\" class=\"mw-headline\">Probando el nuevo Certificado SSL<br \/>\n<\/span><\/h2>\n<p>El \u00faltimo paso es irnos a nuestro navegador preferido y abrir la URL de nuestro servidor Zimbra, para encontrarnos con el siempre agradable color verde en la URL, podemos hacer click en Certificate Information para ver el Certificado que protege el Servidor Zimbra:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-8922 jetpack-lazy-image--handled\" src=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-006.png\" sizes=\"auto, (max-width: 1920px) 100vw, 1920px\" srcset=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-006.png 1920w, https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-006-300x155.png 300w, https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-006-700x361.png 700w\" alt=\"letsencrypt-006\" width=\"1920\" height=\"990\" data-attachment-id=\"8922\" data-permalink=\"https:\/\/www.jorgedelacruz.es\/2015\/12\/09\/zimbra-instalando-un-certificado-gratuito-ssl-lets-encrypt\/letsencrypt-006\/#main\" data-orig-file=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-006.png\" data-orig-size=\"1920,990\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"letsencrypt-006\" data-image-description=\"\" data-medium-file=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-006-300x155.png\" data-large-file=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-006-700x361.png\" data-lazy-loaded=\"1\" \/><\/p>\n<p>Una vez hacemos click para ver m\u00e1s informaci\u00f3n acerca del Certificado SSL, veremos lo siguiente:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"aligncenter size-full wp-image-8921 jetpack-lazy-image--handled\" src=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-007.png\" sizes=\"auto, (max-width: 484px) 100vw, 484px\" srcset=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-007.png 484w, https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-007-300x258.png 300w\" alt=\"letsencrypt-007\" width=\"484\" height=\"416\" data-attachment-id=\"8921\" data-permalink=\"https:\/\/www.jorgedelacruz.es\/2015\/12\/09\/zimbra-instalando-un-certificado-gratuito-ssl-lets-encrypt\/letsencrypt-007\/#main\" data-orig-file=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-007.png\" data-orig-size=\"484,416\" data-comments-opened=\"1\" data-image-meta=\"{&quot;aperture&quot;:&quot;0&quot;,&quot;credit&quot;:&quot;&quot;,&quot;camera&quot;:&quot;&quot;,&quot;caption&quot;:&quot;&quot;,&quot;created_timestamp&quot;:&quot;0&quot;,&quot;copyright&quot;:&quot;&quot;,&quot;focal_length&quot;:&quot;0&quot;,&quot;iso&quot;:&quot;0&quot;,&quot;shutter_speed&quot;:&quot;0&quot;,&quot;title&quot;:&quot;&quot;,&quot;orientation&quot;:&quot;0&quot;}\" data-image-title=\"letsencrypt-007\" data-image-description=\"\" data-medium-file=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-007-300x258.png\" data-large-file=\"https:\/\/www.jorgedelacruz.es\/wp-content\/uploads\/2015\/12\/letsencrypt-007.png\" data-lazy-loaded=\"1\" \/><\/p>\n<h3><span id=\"Building_Multi-SAN_SSL_Certificate_and_complex_scenarios\" class=\"mw-headline\">Solicitando Multi-SAN SSL Certificate y otros escenarios complejos<br \/>\n<\/span><\/h3>\n<p>Let\u2019s Encrypt nos permite muchas opciones diferentes, si quer\u00e9is m\u00e1s informaci\u00f3n acerca de Multi-SAN, etc. lo mejor es\u00a0<a class=\"external text\" href=\"https:\/\/letsencrypt.org\/\" rel=\"nofollow\">dirigirse a la web oficial del proyecto<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Saludos, Let\u2019s Encrypt ha lanzado su Beta hace unos d\u00edas, llevaba siguiendo el proyecto desde hace unos meses, y parece que por f\u00edn est\u00e1 casi listo. \u00bfQu\u00e9 es Let\u2019s Encrypt? Let\u2019s Encrypt es una nueva Entidad Certificadora, es gratis, automatizada y adem\u00e1s abierta. Es una buena opci\u00f3n para proteger entornos Zimbra con un Certificado SSL [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"site-sidebar-layout":"default","site-content-layout":"","ast-site-content-layout":"default","site-content-style":"default","site-sidebar-style":"default","ast-global-header-display":"","ast-banner-title-visibility":"","ast-main-header-display":"","ast-hfb-above-header-display":"","ast-hfb-below-header-display":"","ast-hfb-mobile-header-display":"","site-post-title":"","ast-breadcrumbs-content":"","ast-featured-img":"","footer-sml-layout":"","ast-disable-related-posts":"","theme-transparent-header-meta":"","adv-header-id-meta":"","stick-header-meta":"","header-above-stick-meta":"","header-main-stick-meta":"","header-below-stick-meta":"","astra-migrate-meta-layouts":"default","ast-page-background-enabled":"default","ast-page-background-meta":{"desktop":{"background-color":"var(--ast-global-color-4)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"ast-content-background-meta":{"desktop":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"tablet":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""},"mobile":{"background-color":"var(--ast-global-color-5)","background-image":"","background-repeat":"repeat","background-position":"center center","background-size":"auto","background-attachment":"scroll","background-type":"","background-media":"","overlay-type":"","overlay-color":"","overlay-opacity":"","overlay-gradient":""}},"footnotes":""},"categories":[455,1,730,51,495,271,896],"tags":[859,1138,260,1139,1012,1137,134],"class_list":["post-4403","post","type-post","status-publish","format-standard","hentry","category-apache2","category-viazap","category-clusterweb","category-linux-linuxrs","category-profissional-de-ti","category-seguranca-2","category-zimbra","tag-certificado","tag-gratuito","tag-instalando","tag-lets-encrypt","tag-ssl","tag-un","tag-zimbra"],"_links":{"self":[{"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=\/wp\/v2\/posts\/4403","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=4403"}],"version-history":[{"count":2,"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=\/wp\/v2\/posts\/4403\/revisions"}],"predecessor-version":[{"id":4408,"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=\/wp\/v2\/posts\/4403\/revisions\/4408"}],"wp:attachment":[{"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=4403"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=4403"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/blog.clusterweb.com.br\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=4403"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}