Results 1 to 3 of 3

Thread: [SOLVED] Commercial Cert for Imap/Pop service

  1. #1
    fdezmichael is offline Intermediate Member
    Join Date
    Sep 2008
    Posts
    23
    Rep Power
    6

    Default [SOLVED] Commercial Cert for Imap/Pop service

    Hi...

    A few weeks ago i installed a Comodo Cert to zimbra, and everything is going well in the webmail interface, however when I connect to the service ImapS via Outlook i got and warning saying:

    "The server you are connected to is using a security certificate that could not be verified.
    A certificate chain processed correctly, but terminated in a root certificate which is not trusted by the trust provider.
    Do you want to continue using this server
    yes/no"


    So my question is: the commercial cert that i've installed does not work with imap/pop services?

    Is there a way to do it?

    Thanks in advance.

    Michael.-

  2. #2
    raj's Avatar
    raj
    raj is offline Moderator
    Join Date
    Oct 2005
    Location
    USA, Canada and India
    Posts
    777
    Rep Power
    10

    Default

    Quote Originally Posted by fdezmichael View Post
    ..but terminated in a root certificate which is not trusted by the trust provider.
    did you follow the following link:
    Installing a Comodo SSL Certificate on ZCS 5.0.x - Zimbra :: Wiki

    looks like CA chain is not installed..or something else ?


    Raj
    i2k2 Networks
    Dedicated & Shared Zimbra Hosting Provider

  3. #3
    fdezmichael is offline Intermediate Member
    Join Date
    Sep 2008
    Posts
    23
    Rep Power
    6

    Default

    Yes in that way i did it.

    With "zmcertmgr viewdeployedcrt" i got:

    ::service mta::
    notBefore=Feb 27 00:00:00 2009 GMT
    notAfter=Feb 27 23:59:00 2010 GMT
    subject= /C=CL/postalCode=7561115/ST=Metropolitana/L=Santiago/streetAddress=Las Condes/streetAddress=Av. Rosario Norte 555, Piso 10/O=Enjoy Gestion Ltda/OU=Servicios Web/OU=Issued through Enjoy Gestion Ltda. E-PKI Manager/OU=Comodo PremiumSSL Wildcard/CN=*.enjoy.cl
    issuer= /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
    SubjectAltName= *.enjoy.cl, enjoy.cl
    ::service proxy::
    notBefore=Feb 27 00:00:00 2009 GMT
    notAfter=Feb 27 23:59:00 2010 GMT
    subject= /C=CL/postalCode=7561115/ST=Metropolitana/L=Santiago/streetAddress=Las Condes/streetAddress=Av. Rosario Norte 555, Piso 10/O=Enjoy Gestion Ltda/OU=Servicios Web/OU=Issued through Enjoy Gestion Ltda. E-PKI Manager/OU=Comodo PremiumSSL Wildcard/CN=*.enjoy.cl
    issuer= /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
    SubjectAltName= *.enjoy.cl, enjoy.cl
    ::service mailboxd::
    notBefore=Feb 27 00:00:00 2009 GMT
    notAfter=Feb 27 23:59:00 2010 GMT
    subject= /C=CL/postalCode=7561115/ST=Metropolitana/L=Santiago/streetAddress=Las Condes/streetAddress=Av. Rosario Norte 555, Piso 10/O=Enjoy Gestion Ltda/OU=Servicios Web/OU=Issued through Enjoy Gestion Ltda. E-PKI Manager/OU=Comodo PremiumSSL Wildcard/CN=*.enjoy.cl
    issuer= /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
    SubjectAltName= *.enjoy.cl, enjoy.cl
    ::service ldap::
    notBefore=Feb 27 00:00:00 2009 GMT
    notAfter=Feb 27 23:59:00 2010 GMT
    subject= /C=CL/postalCode=7561115/ST=Metropolitana/L=Santiago/streetAddress=Las Condes/streetAddress=Av. Rosario Norte 555, Piso 10/O=Enjoy Gestion Ltda/OU=Servicios Web/OU=Issued through Enjoy Gestion Ltda. E-PKI Manager/OU=Comodo PremiumSSL Wildcard/CN=*.enjoy.cl
    issuer= /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
    SubjectAltName= *.enjoy.cl, enjoy.cl


    As I said via webminterface verything works pretty well, the problem is via MUA.

    BTW: What about: /opt/zimbra/ssl/zimbra/server: ?

    server.crt server.csr server.key

    Are those the self-signed certs?

    Any input?

    Thanks for the help!

    Michael.-

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Upgrade Self Signed Cert to Commercial Cert (godaddy)
    By lareck in forum Administrators
    Replies: 1
    Last Post: 01-04-2010, 02:51 AM
  2. Replies: 5
    Last Post: 05-28-2009, 12:53 AM
  3. Replies: 20
    Last Post: 03-18-2008, 05:37 AM
  4. Replies: 2
    Last Post: 03-25-2007, 09:40 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •