Commercial SSL certificate issue after upgrade

[fernandomm]

Hello,

I have upgrade Zimbra to version 6.0.4 and noticed that whenever i upgrade, i always have to install my commercial SSL certificate again.

Is this the expected behaviour of zimbra? Do you also have to reinstall certificates after upgrade?

Thanks,

Fernando.

[Chadsel Chen]

I have the same experience and my SSL certificate is from GoDaddy.

[jfiore]

Bump -- we installed 6.0.5 last night and had the same thing happen with our commercial cert. I was unable to find any specific details neither in the forum nor the wiki about how this should have worked.

Re-installing the certificate using zmcertmgr fixed it after having failed trying to re-install it using the admin gui.

Are you supposed to remove any self-signed certificates that might have existed? Perhaps that's why the install.sh used the old certificate? If yes, what is the cleanest procedure for removing certificates in 6.0.5? Thanks.

James

[phoenix]

Originally Posted by jfiore

Bump -- we installed 6.0.5 last night and had the same thing happen with our commercial cert. I was unable to find any specific details neither in the forum nor the wiki about how this should have worked.

You might be interested in this: Bug 41683 – expired CA causes new self signed certs to be deployed over valid commercial cert - there are several threads in the forums that mention this problem and the self-signed certificates during the upgrade.

Originally Posted by jfiore

Are you supposed to remove any self-signed certificates that might have existed? Perhaps that's why the install.sh used the old certificate? If yes, what is the cleanest procedure for removing certificates in 6.0.5?

There should be no need to do anything with the Self-Signed certificates, they will be updated as needed.