Zimbra offers Open Source email server software and shared calendar for Linux and the Mac
Go Back   Zimbra :: Forums > Zimbra Collaboration Suite > Administrators

Welcome to the Zimbra :: Forums!
Welcome, if you would like to post a comment please register. We also encourage you to explore all things Zimbra with our team and members of the community.

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 09-17-2009, 01:01 AM
Intermediate Member
 
Posts: 20
Question Problem with install RapidSSL Certificate

Hi Guys,

I already have generated certificate for my domain. I have next files
Certificate Signing Request: *.domain.net.ua.csr
Certificate: *.domain.net.ua.crt
Private Key: *.domain.net.ua.key

after that I try to install RapidSSL certificate with wizard from Admin panel and using this
How to Install SSL for FreeSSL RapidSSL GeoTrust using Admin GUI in Zimbra 5.x

and a see next error

Сертификат не установлен из-за ошибки : system failure: XXXXX ERROR: Unmatching certificate (/opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp/current.crt) and private key (/opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp/current_comm.key) pair.

Can you help me with this? I think I need replace Certificate Signing Request in Zimbra because Certificate Signing Request generated from Zimbra Admim Panel are different that the request from company where I bought the certificate.

thanks a lot
Reply With Quote
  #2 (permalink)  
Old 09-17-2009, 01:05 AM
Zimbra Consultant & Moderator
 
Posts: 20,313
Default

[SOLVED] Installing existing SSL certificates (solved)
__________________
Regards


Bill
Reply With Quote
  #3 (permalink)  
Old 09-17-2009, 02:00 AM
Intermediate Member
 
Posts: 20
Default

I found this

Installing rapidssl certs: with rootca and chained cert

but I see next

Code:
root@mail:/opt/zimbra/ssl/zimbra/commercial# ls -la
total 24
drwxr----- 2 root root 4096 2009-09-17 11:56 .
drwxr----- 5 root root 4096 2009-07-07 08:07 ..
-rwxrwxrwx 1 root root  949 2009-09-17 11:42 commercial_ca.crt
-rwxrwxrwx 1 root root 1305 2009-09-17 11:24 commercial.crt
-rwxrwxrwx 1 root root  752 2009-09-17 11:25 commercial.csr
-rwxr----- 1 root root  886 2009-09-17 11:25 commercial.key
root@mail:/opt/zimbra/ssl/zimbra/commercial# 
root@mail:/opt/zimbra/ssl/zimbra/commercial# /opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key commercial.crt commercial_ca.crt
** Verifying commercial.crt against /opt/zimbra/ssl/zimbra/commercial/commercial.key
Certificate (commercial.crt) and private key (/opt/zimbra/ssl/zimbra/commercial/commercial.key) match.
Error loading file commercial_ca.crt
29418:error:0906D064:PEM routines:PEM_read_bio:bad base64 decode:pem_lib.c:759:
29418:error:0B084009:x509 certificate routines:X509_load_cert_crl_file:PEM lib:by_file.c:280:
usage: verify [-verbose] [-CApath path] [-CAfile file] [-purpose purpose] [-crl_check] [-engine e] cert1 cert2 ...
recognized usages:
	sslclient 	SSL client
	sslserver 	SSL server
	nssslserver	Netscape SSL server
	smimesign 	S/MIME signing
	smimeencrypt	S/MIME encryption
	crlsign   	CRL signing
	any       	Any Purpose
	ocsphelper	OCSP helper
XXXXX ERROR: Invalid Certificate: 
root@mail:/opt/zimbra/ssl/zimbra/commercial#
root@mail:/opt/zimbra/ssl/zimbra/commercial# more commercial_ca.crt
-----BEGIN CERTIFICATE----- 
MIICkDCCAfmgAwIBAgIBATANBgkqhkiG9w0BAQQFADBaMQswCQYDVQQGEwJVUzEc MBoGA1UEChMTRXF1aWZheCBTZWN1cmUgSW5jLjEtMCsGA1UEAxMkRXF1aWZheCBT ZWN1cmUgR2xvYmFsIGVCdXNpbmVzcyBDQS0xMB4XDTk5MDYyM
TA0MDAwMFoXDTIw MDYyMTA0MDAwMFowWjELMAkGA1UEBhMCVVMxHDAaBgNVBAoTE0VxdWlmYXggU2Vj dXJlIEluYy4xLTArBgNVBAMTJEVxdWlmYXggU2VjdXJlIEdsb2JhbCBlQnVzaW5l c3MgQ0EtMTCBnzANBgkqhkiG9w0BAQEFA
AOBjQAwgYkCgYEAuucXkAJlsTRVPEnC UdXfp9E3j9HngXNBUmCbnaEXJnitx7HoJpQytd4zjTov2/KaelpzmKNc6fuKcxtc 58O/gGzNqfTWK8D3+ZmqY6KxRwIP1ORROhI8bIpaVIRw28HFkM9yRcuoWcDNM50/ o5brhTMhHD4ePmBud
pxnhcXIw2ECAwEAAaNmMGQwEQYJYIZIAYb4QgEBBAQDAgAH MA8GA1UdEwEB/wQFMAMBAf8wHwYDVR0jBBgwFoAUvqigdHJQa0S3ySPY+6j/s1dr aGwwHQYDVR0OBBYEFL6ooHRyUGtEt8kj2Puo/7NXa2hsMA0GCSqGSIb3DQEBBAUA A
4GBADDiAVGqx+pf2rnQZQ8w1j7aDRRJbpGTJxQx78T3LUX47Me/okENI7SS+RkA Z70Br83gcfxaz2TE4JaY0KNA4gGK7ycH8WUBikQtBmV1UsCGECAhX2xrD2yuCRyv 8qIYNMR1pHMc8Y3c7635s3a0kr/clRAevsvIO1qEYBlWlKlV 
-----END CERTIFICATE-----
root@mail:/opt/zimbra/ssl/zimbra/commercial#

Last edited by phoenix; 09-17-2009 at 02:47 AM..
Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes


Similar Threads

Why Join?

Registering let's you ask questions, makes it easier to search, displays any files attached to posts, and notifies you about replies.

blog.zimbra.com




 

SEO by vBSEO ©2011, Crawlability, Inc.