[Klug]

Originally Posted by jholder

Move the stuff in /opt/zimbra/ssl to a temp directory, and rerun the commands.

That fixed it 8)

We moved everything elsewhere except ca.csr (we tried without the old file and it did not work), steps a to d and it works.

There might be a problem with zmcertmgr : the /opt/zimbra/ssl/zimbra/ca/ca.pem file showed the correct hour (when I modified it) but what was inside is wrong :

# openssl x509 -in /opt/zimbra/ssl/zimbra/ca/ca.pem -noout -text
Certificate:
    Data:
        Version: 1 (0x0)
        Serial Number: 0 (0x0)
        Signature Algorithm: md5WithRSAEncryption
        Issuer: C=US, ST=N/A, L=N/A, O=Zimbra Collaboration Suite
        Validity
            Not Before: Sep 19 14:30:12 2006 GMT
            Not After : Sep 19 14:30:12 2007 GMT
  .....

Thank you so much for your help.

Should I open a bug ?