[SOLVED] Problem when install CAcert certificate

[bibo]

Hi All,

I installed the new certificate (create by CACert) without problem.
But when I restart the zimbra the webmail haven't worked anymore.

I show bellow the message when I start the zimbra.

[zimbra@mailhost ~]$ zmcontrol start
Host mailhost.coc.ufrj.br
Starting ldap...Done.
Unable to determine enabled services from ldap.
Enabled services read from cache. Service list may be inaccurate.
Starting logger...Done.
Starting mailbox...Done.
Starting antispam...Done.
Starting antivirus...Done.
Starting snmp...Done.
Starting spell...Done.
Starting mta...Done.
Starting stats...Done.
[zimbra@mailhost ~]$

Why do I have problem with ldap after I installed the new cert?
How do I fix this?

Best regards,
Bibo

[bibo]

Hi,

I forgot to say that I imported the root and intermediate certficate in PEM format from CACert using administrator console (web).

Bellow I show the output from zmcertmgr to verify certs.

root@mailhost ca]# /opt/zimbra/bin/zmcertmgr verifycrt comm
** Verifying /opt/zimbra/ssl/zimbra/commercial/commercial.crt against /opt/zimbra/ssl/zimbra/commercial/commercial.key
Certificate (/opt/zimbra/ssl/zimbra/commercial/commercial.crt) and private key (/opt/zimbra/ssl/zimbra/commercial/commercial.key) match.
Valid Certificate: /opt/zimbra/ssl/zimbra/commercial/commercial.crt: OK

How do I fix the ldap problem?

Best regards,
Bibo

[dehylus]

Any solution???

[uxbod]

Ajcody-Notes-SSLCerts - Zimbra :: Wiki

[bibo]

Originally Posted by dehylus

Any solution???

Yes. I generate another certificate with webmail.mydomain.com and alternative name with myserver name. The problem was that the ldap have to have myserver name inside the certificate.

Regards,
Bibo