external ldap authentication over SSL problem

[eyablon]

Hi, I am getting the following when I try to authenticate against an external ldap server:

"SSL connect problem, most likely untrusted certificate"

Authentication works fine without SSL. My LDAP server is using a certificate signed by our own Certificate Authority. How can I get Zimbra to trust this certificate?

Thanks and Regards,

Eric Yablonowitz
TripAdvisor LLC

[marcmac]

You'll want to add your cert to the cacerts file, which java trusts.

keytool -import -keystore /opt/zimbra/java/jre/lib/security/cacerts -storepass changeit -alias <alias> -file <certfile>

where certfile is the file your cert is in, and alias is a descriptive name for the cert (eg, ldapauth)

tomcat stop
tomcat start