Page 1 of 2 12 LastLast
Results 1 to 10 of 13

Thread: [SOLVED] zimbra webmail is asking about security certificate.

  1. #1
    nishith's Avatar
    nishith is offline Special Member
    Join Date
    Jun 2008
    Location
    india
    Posts
    123
    Rep Power
    6

    Exclamation [SOLVED] zimbra webmail is asking about security certificate.

    I have successfully installed ZCS MTA server,which is based on open source.

    Now,below is my link to open a web console.

    https://webmail.renovau.net
    https://webmail.renovau.net:7071/zimbraAdmin


    By typing both URL into my browser,it is asking for Security certificate. The detailed message is as given below.

    Secure Connection Failed

    webmail.renovau.net:7071 uses an invalid security certificate.

    The certificate is not trusted because the issuer certificate is unknown.

    (Error code: sec_error_unknown_issuer)


    * This could be a problem with the server's configuration, or it could be someone trying to impersonate the server.

    * If you have connected to this server successfully in the past, the error may be temporary, and you can try again later.


    Or you can add an exception…

    Now,in this situation,what should i do?


    Please note that by clicking Or You can add exception... link(give above), I can see the login page.

    But,what to do to login into web console without this message?

    Waiting for response.
    Nishith.

  2. #2
    mmorse's Avatar
    mmorse is offline Moderator
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    20

    Default

    Different browsers give different warning levels for self-signed certs (one's not signed by a recognized certificate authority).

    A) Commercial Certificate in 5.x - Zimbra :: Wiki

    B) You can install it as a trusted certificate on your machine, but yes when working from a different one you'll still get the prompt.

    Firefox & Safari are a tad nicer in their warnings

    Let's say you're using Windows, IE7 for instance got a lot more harsh in their warnings...especially if it's not commercial & the server/common name doesn't match the url entered in your browser:
    HTTPS Security Improvements in Internet Explorer 7
    IEBlog : Better Website Identification and Extended Validation Certificates in IE7 and Other Browsers
    More on the Extended Validation Certificates aka: 'green-bar' initiative: Extended Validation Certificate - Wikipedia, the free encyclopedia

  3. #3
    mmorse's Avatar
    mmorse is offline Moderator
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    20

    Default

    Quote Originally Posted by mmorse View Post
    If you decide to purchase a commercial certificate I highly suggest trying the admin console gui certificate wizard first.

  4. #4
    nishith's Avatar
    nishith is offline Special Member
    Join Date
    Jun 2008
    Location
    india
    Posts
    123
    Rep Power
    6

    Default

    It means this won't create any problem regarding web base GUI & web based admin console.Is it ture?

    How to get permanent certificate from ZIMBRA to remove this error warning?

    In my organisation,nobody will understand this type of warning message & they will ask me about it.So,it is better to fix this warning.

    Please tell me how to do.

    Waiting.

  5. #5
    mmorse's Avatar
    mmorse is offline Moderator
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    20

    Default

    Quote Originally Posted by nishith View Post
    It means this won't create any problem regarding web base GUI & web based admin console.Is it ture?
    Correct, doesn't appear to be any problem with your self-signed certificate.

    A) You can ignore or accept/install the certificate in your browser so you're not prompted again.

    B) Or use plain HTTP, but I gather you don't want that. CLI zmtlsctl to set Web Server Mode - Zimbra :: Wiki

    Quote Originally Posted by nishith View Post
    How to get permanent certificate from ZIMBRA to remove this error warning?
    C) ZCS can only create a self-signed. We are not a certificate authority, you will have to purchase one - use the admin console GUI certificate wizard to walk you through the process of installing a commercial certificate.

  6. #6
    nishith's Avatar
    nishith is offline Special Member
    Join Date
    Jun 2008
    Location
    india
    Posts
    123
    Rep Power
    6

    Default

    Do you charge for this certificate? Or Without this certificate,my ZCS will work fine for upcomming years?

  7. #7
    mmorse's Avatar
    mmorse is offline Moderator
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    20

    Default

    Quote Originally Posted by nishith View Post
    Do you charge for this certificate?
    Zimbra does NOT issue commercial certificates.

    Network Solutions, Verisign, GoDaddy etc are examples of companies that issue 3rd-party signed commercial certificates - and yes you have to pay for them.

    Quote Originally Posted by nishith View Post
    Or Without this certificate,my ZCS will work fine for upcomming years?
    It will work just fine - just ignore the browser warnings.

  8. #8
    mmorse's Avatar
    mmorse is offline Moderator
    Join Date
    May 2006
    Location
    USA
    Posts
    6,242
    Rep Power
    20

    Default

    BTW is that FF3 you're using?

  9. #9
    nishith's Avatar
    nishith is offline Special Member
    Join Date
    Jun 2008
    Location
    india
    Posts
    123
    Rep Power
    6

    Default

    Sir,I can't understand your last message.Please clarify.

  10. #10
    phoenix is online now Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,201
    Rep Power
    56

    Default

    Quote Originally Posted by nishith View Post
    Please note that by clicking Or You can add exception... link(give above), I can see the login page.

    But,what to do to login into web console without this message?
    As you are using Firefox 3, just add a permanent exception to the certificate check.
    Regards


    Bill


    Acompli: A new adventure for Co-Founder KevinH.

Page 1 of 2 12 LastLast

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Replies: 21
    Last Post: 02-04-2010, 10:06 AM
  2. Replies: 12
    Last Post: 02-25-2008, 07:28 PM
  3. Replies: 22
    Last Post: 12-02-2007, 05:05 PM
  4. huge log size
    By rmvg in forum Administrators
    Replies: 5
    Last Post: 01-02-2007, 10:39 AM
  5. Replies: 16
    Last Post: 09-07-2006, 06:39 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •