[SOLVED] 5.0.6 FOSS Instaling new Self Signed Cert Error

[r8escjohn]

On our Zimbra FOSS 5.0.6 install our self signed cert expired yesterday and trying to create a new self signed cert.
When I attempt to create a new self signed cert I get 'Your certificate was not installed due to the error : system failure: XXXXX ERROR: failed to create jetty.pcks12'. Good news is that so far this issue does not seem to be affecting mail flow...:->
Found following thread:
[SOLVED] Expired Cert in 5.0GA can cause mail Delivery failure
but is seems to deal with 5.0GA and 5.0.1. Do I do the same steps in 5.0.6 or are they different now to address this error? I may have caused initial issue as I added my Country, City and State info into the certificate CSR fields as they were blank. My bad.....I am thinking that I just need to remove the old cert info as in that thread above but wanted to make sure that in the version I have the process is the same or similar before I toast my live box.
Thanks for any assistance you can provid!

[r8escjohn]

Ok, now after a server restart after a full back my Zimbra Server is now dead....
Stuck at step:
(b2) ldapmodify -x -h fqdn.server.tld -D "uid=zimbra,cn=admins,cn=zimbra" -W
I continually get
ldap_bind: Can't contact LDAP server (-1)
Syntax of what I am typing:

zimbra@zimbra:~> ldapmodify -x -h zimbra.r8esc.k12.in.us -D "uid=zimbra,cn=admins,cn=zimbra" -W Enter LDAP Password:
ldap_bind: Can't contact LDAP server (-1)
zimbra@zimbra:~>

I have tried many times putting the password in so I am sure I am putting correct password.
What am I missing in that command??????

[uxbod]

You should really follow Recreating a Self-Signed SSL Certificate - Zimbra :: Wiki.

[r8escjohn]

uxbod,
Ok....That is where I am at now and get this

zimbra@zimbra:/root> keytool -delete -alias my_ca -keystore /opt/zimbra/java/jre/lib/security/cacerts -storepass changeit
keytool error: java.io.FileNotFoundException: /opt/zimbra/java/jre/lib/security/cacerts (Permission denied)

Thanks!

[r8escjohn]

Ok, I am a compleate idoit...:->
Thick skull syndorome (TSS) strikes again...
Go here and follow :
Problem with Certificate can cause MTA Failure - Zimbra :: Wiki
AND READ THE LINE:

Note, for zcs version 5.0.6 (c) should be Run as root: /opt/zimbra/bin/zmcertmgr deploycrt self

Issue resolved...