Fun with certificates The problem here is that your keystore has the old my_ca alias in it, and you want to recreate that.
keytool -list -keystore /opt/zimbra/tomcat/conf/keystore -storepass zimbra
Should show a my_ca alias and a tomcat alias. Delete them both:
keytool -delete -keystore /opt/zimbra/tomcat/conf/keystore -storepass zimbra -alias my_ca
keytool -delete -keystore /opt/zimbra/tomcat/conf/keystore -storepass zimbra -alias tomcat
Then re-run the zmcreatecert and zmcertinstall commands. |