[marcmac]

Well, that's strange - I'll try to duplicate that, but for now:

as root:
cd ~zimbra
mv ssl foo
mkdir ssl
chown zimbra ssl

as zimbra:
zmcreateca
zmcreatecert

find ssl/

Should have:
ssl/
ssl/ssl
ssl/ssl/ca
ssl/ssl/ca/ca.pem
ssl/ssl/ca/ca.srl.old
ssl/ssl/ca/ca.key
ssl/ssl/ca/ca.csr
ssl/ssl/ca/ca.srl
ssl/ssl/zmssl.cnf
ssl/ssl/cert
ssl/ssl/server
ssl/ssl/server/tomcat.crt
ssl/ssl/server/server.csr
ssl/ssl/server/tomcat.csr
ssl/ssl/server/server.key
ssl/ssl/server/server.crt
ssl/ssl/newCA
ssl/ssl/newCA/index.txt
ssl/ssl/newCA/newcerts
ssl/ssl/newCA/newcerts/02.pem
ssl/ssl/newCA/index.txt.old

zmcertinstall mailbox
zmcertinstall mta ssl/ssl/server/server.crt ssl/ssl/server/server.key