I have a Zimbra ZCS 7.1.3 server it running the OSE version. The server hosts 4 domains for email. Each of the email domains has its own SSL cert that is self generated.
Something that has sort of bugged me since the time it was installed is the way I have everything configured. When I set it up I wanted an SSL cert for each domain, as per a conversation on the Zimbra forums I was told I needed a separate IP address for EACH domain for SSL to work right.
So this left me with a configuration like so;
eth0 - 10.0.0.17/24 - mail.solignis.com eth0:0 - 10.0.0.18/24 - mail.oddablesound.com eth0:1 - 10.0.0.19/24 - mail.campbellsurvey.com eth0:2 - 10.0.0.20/24 - mail.campbellsurvey.net
Each of those IP addresses is NATed to a public IP and has basic port forwarded to it. While everything does in fact work I can help but think this is not correct.
The original reason this was though to be the correct way was because of the command you must enter to make per domain ssl certs with zimbra.
The command is, zmprov md <domain> +zimbraVirtualHostName {domain.example.com}
+zimbraVirtualIPAddress {1.2.3.4}
The other way to make multiple domains to work is use an SSL with alternative names. Which I am not entirely sure how to use.
In the end all I am trying to do is make the zimbra a little less complex on the networking side.