Results 1 to 4 of 4

Thread: Certificate issues

  1. #1
    gallimore is offline Active Member
    Join Date
    Jan 2009
    Posts
    47
    Rep Power
    6

    Exclamation Certificate issues

    Ok, I have trawled trhough the fourms but can't find anything to help regarding the acceptance of self signed certificates with IE 7/8 and XP/Vista.

    I am using 5.0.16 FOSS with the following setup:

    Zimbra Proxy Server
    Zimbra Server with everything except Proxy

    Internal users are accessing their mail directly from the zimbra server.
    External users are accessing their mail via the Zimbra Proxy (SSL only).

    Access to the Zimbra Admin console is restricted to internal network either directly or via the VPN.

    Whenever https is used IE reports a problem with the certificate (this affects all external users and internal users authorised to access the admin console). I have followed the recommendations on both this site and other sites for getting IE to accept a "problem" certificate but to no avail.

    These include (but are not limited to!) adding the certificate to the local user and local computer certificate store as a trusted root certificate authority via mmc and via the internet options dialog. The site was also added to the trusted site list. On vista this has been repeated running the browser as the administrator. The usual clearing of caches, start/stop IE and reboots were included.

    We are using a self signed certificate because only employees need access the server.

    When the systems were setup no additional commands were run to generate a self signed certificate (certificates were reported to have been generated successfully during setup).

    Of course, this issue doesn't occur when using Firefox but I cannot dictate its use.

    So, what do I need to do (what commands should I run) to verify that the self signed certificate is indeed correct?

    Second question related to certificates:

    If I regenreate the certificate for the Mail server and Proxy, what steps need to be completed to make sure both are aware of the changes? Will this be automatic when using the Admin console as opposed to the CLI?

    Thanks
    Paul
    Paul Gallimore

  2. #2
    rmvg is offline Advanced Member
    Join Date
    Sep 2005
    Location
    Calgary
    Posts
    208
    Rep Power
    9

    Default

    I have the same issue with certificates ie6 does not seem to accept them correctly??? and just keeps asking over and over again very annoying.


    Quote Originally Posted by gallimore View Post
    Ok, I have trawled trhough the fourms but can't find anything to help regarding the acceptance of self signed certificates with IE 7/8 and XP/Vista.

    I am using 5.0.16 FOSS with the following setup:

    Zimbra Proxy Server
    Zimbra Server with everything except Proxy

    Internal users are accessing their mail directly from the zimbra server.
    External users are accessing their mail via the Zimbra Proxy (SSL only).

    Access to the Zimbra Admin console is restricted to internal network either directly or via the VPN.

    Whenever https is used IE reports a problem with the certificate (this affects all external users and internal users authorised to access the admin console). I have followed the recommendations on both this site and other sites for getting IE to accept a "problem" certificate but to no avail.

    These include (but are not limited to!) adding the certificate to the local user and local computer certificate store as a trusted root certificate authority via mmc and via the internet options dialog. The site was also added to the trusted site list. On vista this has been repeated running the browser as the administrator. The usual clearing of caches, start/stop IE and reboots were included.

    We are using a self signed certificate because only employees need access the server.

    When the systems were setup no additional commands were run to generate a self signed certificate (certificates were reported to have been generated successfully during setup).

    Of course, this issue doesn't occur when using Firefox but I cannot dictate its use.

    So, what do I need to do (what commands should I run) to verify that the self signed certificate is indeed correct?

    Second question related to certificates:

    If I regenreate the certificate for the Mail server and Proxy, what steps need to be completed to make sure both are aware of the changes? Will this be automatic when using the Admin console as opposed to the CLI?

    Thanks
    Paul
    Computer King

    http://www.computerking.ca

    Sales, Service, and Hosting
    Email, Data, and Web Packages
    Ask about web design specials

    Affiliates
    http://www.computerking.ca/pages/lin...affiliates.htm

  3. #3
    rmvg is offline Advanced Member
    Join Date
    Sep 2005
    Location
    Calgary
    Posts
    208
    Rep Power
    9

    Default

    I hate do this as i know it is rude but .......... bump
    Computer King

    http://www.computerking.ca

    Sales, Service, and Hosting
    Email, Data, and Web Packages
    Ask about web design specials

    Affiliates
    http://www.computerking.ca/pages/lin...affiliates.htm

  4. #4
    gallimore is offline Active Member
    Join Date
    Jan 2009
    Posts
    47
    Rep Power
    6

    Default

    Quote Originally Posted by rmvg View Post
    I hate do this as i know it is rude but .......... bump
    Just to let you know, I have made no further progress with this issue.
    Paul Gallimore

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Help ! SSL Certificate issues
    By jwf6911 in forum Administrators
    Replies: 1
    Last Post: 05-19-2008, 01:36 PM
  2. Certificate issues - multiple certificates
    By jwf6911 in forum Administrators
    Replies: 0
    Last Post: 05-12-2008, 10:21 AM
  3. SSL Certificate related issues
    By jwf6911 in forum Administrators
    Replies: 1
    Last Post: 05-11-2008, 09:34 AM
  4. Certificate fun...
    By TommyTheKid in forum Administrators
    Replies: 2
    Last Post: 02-12-2008, 05:32 PM
  5. Replies: 1
    Last Post: 11-05-2007, 06:55 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •