Issue sharing Address Books with Tomcat Commercial Cert SSL We're seeing an issue with accessing sharing Address Books with commercial cert HTTPS turned on. (self-signed cert works fine)
The self-cert SSL works fine, and HTTP obviously works fine. But With commercial cert HTTP on we get the following error:
A network service error has occurred.
msg - system failure: IOException
code - service.FAILURE
method - ZmCsfeCommand.prototype.invoke
detail - soap:Receiver
If I change my zmtlsctl to allow HTTP, then the existing shared address book(s) works fine.
We are using an SBSInstant cert installed for Tomcat only (for now). The cert requires 3 imports to the keystore (root, intermed1, intermed2, and the server cert). I'd like to say the install was easy, but since there is little to no documentation on this particular cert, it took some digging and trial and error, but the chain finally worked. I do plan on extracting the keys and using the cert for other services as well (but haven't gotten to that yet. In fact, I HOPE that's the issue here.)
From what we can see, everything else works. (Shared Calendars, for example, appear to be fine.)
Any ideas. I'd really like to use HTTPS with the redirect turned off (so that EVERYTHING runs HTTPS...not just the sign-in screen).
Thanks! |