[SOLVED] ZCS 6.0.1 & rapidssl

[MrSnaKe]

Hu Guys,

I upgrade ZCS to version Release 6.0.1_GA_1816.UBUNTU8_64 UBUNTU8_64 FOSS edition and try to install existing ssl certificate according to this thread

[SOLVED] Installing existing SSL certificates (solved)

3) Copy the newly created keystore-new to /opt/zimbra/tomcat/conf/keystore, replacing existing one (I recommend backup it before).

Error
zimbra@mail:~$ cd /opt/zimbra/tomcat/conf/keystore
-su: cd: /opt/zimbra/tomcat/conf/keystore: No such file or directory
zimbra@mail:~$

Also try to do it according this thread

Recreating a Self-Signed SSL Certificate - Zimbra :: Wiki

Error
zimbra@mail:~$ zmcertinstall mailbox
-su: zmcertinstall: command not found
zimbra@mail:~$

root@mail:/home/snake# zmcertinstall mailbox
bash: zmcertinstall: command not found
root@mail:/home/snake#

Any idea how to do it?

[emmaylots]

Hi,
Though I haven't upgraded to 6.0, but if you check your /opt/zimbra/bin, the command "zmcertinstall is not there" and neither does my ZCS 5.0 has /opt/zimbra/tomcat/conf/store.
I suggest you do a "find . | grep command_you_need.
You can also check /opt/zimbra/ssl or preferably check a the forums relating to the Community Edition.

Good luck

[MrSnaKe]

Ok I try to do next

RapidSSL root ca I think here - http://www.rapidssl.com/cps/UTN.cer

root@mail:/opt/zimbra/ssl/zimbra/commercial# ls -la
total 24
drwxr----- 2 root root 4096 2009-10-16 14:36 .
drwxr----- 5 root root 4096 2009-07-07 08:07 ..
-rwxrwxrwx 1 root root 1606 2009-10-16 14:32 commercial_ca.crt
-rwxrwxrwx 1 root root 1171 2009-10-16 14:36 commercial.crt
-rwxrwxrwx 1 root root 708 2009-10-16 14:17 commercial.csr
-rwxrwxrwx 1 root root 888 2009-10-16 14:29 commercial.key
root@mail:/opt/zimbra/ssl/zimbra/commercial#

after that I do next

root@mail:/opt/zimbra/ssl/zimbra/commercial# chmod 777 *
root@mail:/opt/zimbra/ssl/zimbra/commercial#
root@mail:/opt/zimbra/ssl/zimbra/commercial# chmod 740 commercial.key
root@mail:/opt/zimbra/ssl/zimbra/commercial#
root@mail:/opt/zimbra/ssl/zimbra/commercial# /opt/zimbra/bin/zmcertmgr verifycrt comm commercial.key commercial.crt commercial_ca.crt
** Verifying commercial.crt against commercial.key
Certificate (commercial.crt) and private key (commercial.key) match.
XXXXX ERROR: Invalid Certificate: commercial.crt: /C=UA/O=*.airbites.net.ua/OU=GT01587332/OU=See RapidSSL.com - redirect (c)09/OU=Domain Control Validated - RapidSSL(R)/CN=*.airbites.net.ua
error 20 at 0 depth lookup:unable to get local issuer certificate
root@mail:/opt/zimbra/ssl/zimbra/commercial#


Any idea about this?

[jigi77]

I think it works if you take the good root:

https://www.geotrust.com/resources/r..._Authority.cer


as per the wiki:

Installing a GeoTrust Commercial Certificate - Zimbra :: Wiki


In Zimbra 5, RapidSSL works for me.

[MrSnaKe]

Thx for help. Now all ok.