Results 1 to 3 of 3

Thread: Problem with install RapidSSL Certificate

  1. #1
    MrSnaKe is offline Intermediate Member
    Join Date
    Aug 2009
    Posts
    20
    Rep Power
    5

    Question Problem with install RapidSSL Certificate

    Hi Guys,

    I already have generated certificate for my domain. I have next files
    Certificate Signing Request: *.domain.net.ua.csr
    Certificate: *.domain.net.ua.crt
    Private Key: *.domain.net.ua.key

    after that I try to install RapidSSL certificate with wizard from Admin panel and using this
    How to Install SSL for FreeSSL RapidSSL GeoTrust using Admin GUI in Zimbra 5.x

    and a see next error

    Сертификат не установлен из-за ошибки : system failure: XXXXX ERROR: Unmatching certificate (/opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp/current.crt) and private key (/opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp/current_comm.key) pair.

    Can you help me with this? I think I need replace Certificate Signing Request in Zimbra because Certificate Signing Request generated from Zimbra Admim Panel are different that the request from company where I bought the certificate.

    thanks a lot

  2. #2
    phoenix is offline Zimbra Consultant & Moderator
    Join Date
    Sep 2005
    Location
    Vannes, France
    Posts
    23,201
    Rep Power
    56

  3. #3
    MrSnaKe is offline Intermediate Member
    Join Date
    Aug 2009
    Posts
    20
    Rep Power
    5

    Default

    I found this

    Installing rapidssl certs: with rootca and chained cert

    but I see next

    Code:
    root@mail:/opt/zimbra/ssl/zimbra/commercial# ls -la
    total 24
    drwxr----- 2 root root 4096 2009-09-17 11:56 .
    drwxr----- 5 root root 4096 2009-07-07 08:07 ..
    -rwxrwxrwx 1 root root  949 2009-09-17 11:42 commercial_ca.crt
    -rwxrwxrwx 1 root root 1305 2009-09-17 11:24 commercial.crt
    -rwxrwxrwx 1 root root  752 2009-09-17 11:25 commercial.csr
    -rwxr----- 1 root root  886 2009-09-17 11:25 commercial.key
    root@mail:/opt/zimbra/ssl/zimbra/commercial# 
    root@mail:/opt/zimbra/ssl/zimbra/commercial# /opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key commercial.crt commercial_ca.crt
    ** Verifying commercial.crt against /opt/zimbra/ssl/zimbra/commercial/commercial.key
    Certificate (commercial.crt) and private key (/opt/zimbra/ssl/zimbra/commercial/commercial.key) match.
    Error loading file commercial_ca.crt
    29418:error:0906D064:PEM routines:PEM_read_bio:bad base64 decode:pem_lib.c:759:
    29418:error:0B084009:x509 certificate routines:X509_load_cert_crl_file:PEM lib:by_file.c:280:
    usage: verify [-verbose] [-CApath path] [-CAfile file] [-purpose purpose] [-crl_check] [-engine e] cert1 cert2 ...
    recognized usages:
    	sslclient 	SSL client
    	sslserver 	SSL server
    	nssslserver	Netscape SSL server
    	smimesign 	S/MIME signing
    	smimeencrypt	S/MIME encryption
    	crlsign   	CRL signing
    	any       	Any Purpose
    	ocsphelper	OCSP helper
    XXXXX ERROR: Invalid Certificate: 
    root@mail:/opt/zimbra/ssl/zimbra/commercial#
    root@mail:/opt/zimbra/ssl/zimbra/commercial# more commercial_ca.crt
    -----BEGIN CERTIFICATE----- 
    MIICkDCCAfmgAwIBAgIBATANBgkqhkiG9w0BAQQFADBaMQswCQYDVQQGEwJVUzEc MBoGA1UEChMTRXF1aWZheCBTZWN1cmUgSW5jLjEtMCsGA1UEAxMkRXF1aWZheCBT ZWN1cmUgR2xvYmFsIGVCdXNpbmVzcyBDQS0xMB4XDTk5MDYyM
    TA0MDAwMFoXDTIw MDYyMTA0MDAwMFowWjELMAkGA1UEBhMCVVMxHDAaBgNVBAoTE0VxdWlmYXggU2Vj dXJlIEluYy4xLTArBgNVBAMTJEVxdWlmYXggU2VjdXJlIEdsb2JhbCBlQnVzaW5l c3MgQ0EtMTCBnzANBgkqhkiG9w0BAQEFA
    AOBjQAwgYkCgYEAuucXkAJlsTRVPEnC UdXfp9E3j9HngXNBUmCbnaEXJnitx7HoJpQytd4zjTov2/KaelpzmKNc6fuKcxtc 58O/gGzNqfTWK8D3+ZmqY6KxRwIP1ORROhI8bIpaVIRw28HFkM9yRcuoWcDNM50/ o5brhTMhHD4ePmBud
    pxnhcXIw2ECAwEAAaNmMGQwEQYJYIZIAYb4QgEBBAQDAgAH MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUvqigdHJQa0S3ySPY+6j/s1dr aGwwHQYDVR0OBBYEFL6ooHRyUGtEt8kj2Puo/7NXa2hsMA0GCSqGSIb3DQEBBAUA A
    4GBADDiAVGqx+pf2rnQZQ8w1j7aDRRJbpGTJxQx78T3LUX47Me/okENI7SS+RkA Z70Br83gcfxaz2TE4JaY0KNA4gGK7ycH8WUBikQtBmV1UsCGECAhX2xrD2yuCRyv 8qIYNMR1pHMc8Y3c7635s3a0kr/clRAevsvIO1qEYBlWlKlV 
    -----END CERTIFICATE-----
    root@mail:/opt/zimbra/ssl/zimbra/commercial#
    Last edited by phoenix; 09-17-2009 at 02:47 AM.

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. [SOLVED] Problem when install CAcert certificate
    By bibo in forum Administrators
    Replies: 4
    Last Post: 11-17-2008, 05:49 AM
  2. problem with certificate + WM6?
    By raul_denia in forum Zimbra Mobile
    Replies: 0
    Last Post: 09-01-2008, 05:39 AM
  3. install DNS server for zimbra problem
    By wajdislama in forum Installation
    Replies: 1
    Last Post: 08-16-2008, 09:17 AM
  4. Replies: 0
    Last Post: 01-15-2008, 01:33 PM
  5. Replies: 6
    Last Post: 04-06-2007, 08:32 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •