[SOLVED] Commercial Cert for Imap/Pop service

[fdezmichael]

Hi...

A few weeks ago i installed a Comodo Cert to zimbra, and everything is going well in the webmail interface, however when I connect to the service ImapS via Outlook i got and warning saying:

"The server you are connected to is using a security certificate that could not be verified.
A certificate chain processed correctly, but terminated in a root certificate which is not trusted by the trust provider.
Do you want to continue using this server
yes/no"


So my question is: the commercial cert that i've installed does not work with imap/pop services?

Is there a way to do it?

Thanks in advance.

Michael.-

[raj]

Originally Posted by fdezmichael

..but terminated in a root certificate which is not trusted by the trust provider.

did you follow the following link:
Installing a Comodo SSL Certificate on ZCS 5.0.x - Zimbra :: Wiki

looks like CA chain is not installed..or something else ?


Raj

[fdezmichael]

Yes in that way i did it.

With "zmcertmgr viewdeployedcrt" i got:

::service mta::
notBefore=Feb 27 00:00:00 2009 GMT
notAfter=Feb 27 23:59:00 2010 GMT
subject= /C=CL/postalCode=7561115/ST=Metropolitana/L=Santiago/streetAddress=Las Condes/streetAddress=Av. Rosario Norte 555, Piso 10/O=Enjoy Gestion Ltda/OU=Servicios Web/OU=Issued through Enjoy Gestion Ltda. E-PKI Manager/OU=Comodo PremiumSSL Wildcard/CN=*.enjoy.cl
issuer= /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
SubjectAltName= *.enjoy.cl, enjoy.cl
::service proxy::
notBefore=Feb 27 00:00:00 2009 GMT
notAfter=Feb 27 23:59:00 2010 GMT
subject= /C=CL/postalCode=7561115/ST=Metropolitana/L=Santiago/streetAddress=Las Condes/streetAddress=Av. Rosario Norte 555, Piso 10/O=Enjoy Gestion Ltda/OU=Servicios Web/OU=Issued through Enjoy Gestion Ltda. E-PKI Manager/OU=Comodo PremiumSSL Wildcard/CN=*.enjoy.cl
issuer= /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
SubjectAltName= *.enjoy.cl, enjoy.cl
::service mailboxd::
notBefore=Feb 27 00:00:00 2009 GMT
notAfter=Feb 27 23:59:00 2010 GMT
subject= /C=CL/postalCode=7561115/ST=Metropolitana/L=Santiago/streetAddress=Las Condes/streetAddress=Av. Rosario Norte 555, Piso 10/O=Enjoy Gestion Ltda/OU=Servicios Web/OU=Issued through Enjoy Gestion Ltda. E-PKI Manager/OU=Comodo PremiumSSL Wildcard/CN=*.enjoy.cl
issuer= /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
SubjectAltName= *.enjoy.cl, enjoy.cl
::service ldap::
notBefore=Feb 27 00:00:00 2009 GMT
notAfter=Feb 27 23:59:00 2010 GMT
subject= /C=CL/postalCode=7561115/ST=Metropolitana/L=Santiago/streetAddress=Las Condes/streetAddress=Av. Rosario Norte 555, Piso 10/O=Enjoy Gestion Ltda/OU=Servicios Web/OU=Issued through Enjoy Gestion Ltda. E-PKI Manager/OU=Comodo PremiumSSL Wildcard/CN=*.enjoy.cl
issuer= /C=GB/ST=Greater Manchester/L=Salford/O=Comodo CA Limited/CN=AAA Certificate Services
SubjectAltName= *.enjoy.cl, enjoy.cl


As I said via webminterface verything works pretty well, the problem is via MUA.

BTW: What about: /opt/zimbra/ssl/zimbra/server: ?

server.crt server.csr server.key

Are those the self-signed certs?

Any input?

Thanks for the help!

Michael.-