Add it to cacerts You'll want to add your cert to the cacerts file, which java trusts.
keytool -import -keystore /opt/zimbra/java/jre/lib/security/cacerts -storepass changeit -alias <alias> -file <certfile>
where certfile is the file your cert is in, and alias is a descriptive name for the cert (eg, ldapauth)
tomcat stop
tomcat start |