[SOLVED] zimbra webmail is asking about security certificate.

[nishith]

I have successfully installed ZCS MTA server,which is based on open source.

Now,below is my link to open a web console.

https://webmail.renovau.net
https://webmail.renovau.net:7071/zimbraAdmin

By typing both URL into my browser,it is asking for Security certificate. The detailed message is as given below.

Secure Connection Failed

webmail.renovau.net:7071 uses an invalid security certificate.

The certificate is not trusted because the issuer certificate is unknown.

(Error code: sec_error_unknown_issuer)


* This could be a problem with the server's configuration, or it could be someone trying to impersonate the server.

* If you have connected to this server successfully in the past, the error may be temporary, and you can try again later.

Or you can add an exception…

Now,in this situation,what should i do?


Please note that by clicking Or You can add exception... link(give above), I can see the login page.

But,what to do to login into web console without this message?

Waiting for response.
Nishith.

[mmorse]

Different browsers give different warning levels for self-signed certs (one's not signed by a recognized certificate authority).

A) Commercial Certificate in 5.x - Zimbra :: Wiki

B) You can install it as a trusted certificate on your machine, but yes when working from a different one you'll still get the prompt.

Firefox & Safari are a tad nicer in their warnings

Let's say you're using Windows, IE7 for instance got a lot more harsh in their warnings...especially if it's not commercial & the server/common name doesn't match the url entered in your browser:
HTTPS Security Improvements in Internet Explorer 7
IEBlog : Better Website Identification and Extended Validation Certificates in IE7 and Other Browsers
More on the Extended Validation Certificates aka: 'green-bar' initiative: Extended Validation Certificate - Wikipedia, the free encyclopedia

[mmorse]

A) Commercial Certificate in 5.x - Zimbra :: Wiki

If you decide to purchase a commercial certificate I highly suggest trying the admin console gui certificate wizard first.

[nishith]

It means this won't create any problem regarding web base GUI & web based admin console.Is it ture?

How to get permanent certificate from ZIMBRA to remove this error warning?

In my organisation,nobody will understand this type of warning message & they will ask me about it.So,it is better to fix this warning.

Please tell me how to do.

Waiting.

[mmorse]

It means this won't create any problem regarding web base GUI & web based admin console.Is it ture?

Correct, doesn't appear to be any problem with your self-signed certificate.

A) You can ignore or accept/install the certificate in your browser so you're not prompted again.

B) Or use plain HTTP, but I gather you don't want that. CLI zmtlsctl to set Web Server Mode - Zimbra :: Wiki

How to get permanent certificate from ZIMBRA to remove this error warning?

C) ZCS can only create a self-signed. We are not a certificate authority, you will have to purchase one - use the admin console GUI certificate wizard to walk you through the process of installing a commercial certificate.

[nishith]

Do you charge for this certificate? Or Without this certificate,my ZCS will work fine for upcomming years?

[mmorse]

Do you charge for this certificate?

Zimbra does NOT issue commercial certificates.

Network Solutions, Verisign, GoDaddy etc are examples of companies that issue 3rd-party signed commercial certificates - and yes you have to pay for them.

Or Without this certificate,my ZCS will work fine for upcomming years?

It will work just fine - just ignore the browser warnings.

[mmorse]

BTW is that FF3 you're using?

[nishith]

Sir,I can't understand your last message.Please clarify.

[phoenix]

Please note that by clicking Or You can add exception... link(give above), I can see the login page.

But,what to do to login into web console without this message?

As you are using Firefox 3, just add a permanent exception to the certificate check.