I am going to add to this, hoping to help with the searching.
I upgrading from an earlier release to 5.0.11 and it broke my commercial ssl certs. The quick fix was to use zmcertmgr to re-issue some self-signned certs, this allowed me to get e-mail flow working. Otherwise I was having zmmailboxdctl die on me with something about ldap, startssl and dict lookups.
When I tried to re-install the commercial SSL, i was getting -
Unmatching certificate (/opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp/current.crt) and private key (/opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp/current_comm.key) pair.
the problem was as stated above, it was missing a blank line at the end of the issued cert. I didn't have to do all the other steps to install the comm cert, just had to open the file, add a blank line and then re-install with Zimbra Certificates Manager.
I was using CACert (cacert.org) as my CA. I will try to add this to the wiki page to help see if this catches it. |