Can't start Zimbra MTA

[zibra]

Dear experts,
I have two server: one for mailbox server and one for MTA Server. The system is running ok but today, I see that I can't start Zimbra on MTA Server. Each time I try to start, Zimbra said that:
"Host mailmta.domain.com
Unable to determine enabled services from ldap.
Unable to determine enabled services. Cache is out of date or doesn't exist."

I have checked everything about hosts file, resolv.conf file, dns, ... and there are no problem. When I try to update key by zmupdateauthkeys on MTA server, I see the following error: "ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.net.ssl.SSLHandshakeException sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: signature check failed)".
Please help me to resolve it.

Thank you so much!

[phoenix]

You should try a search before posting a question, search the forums for the words 'PKIX path validation failed'.

[pravingrane]

I had similler problem my certifacte was expired. It happend exactly after 1 year. Try to recreate certs.

I did following thing as root

chown -R zimbra:zimbra /opt/zimbra

/opt/zimbra/libexec/zmfixperms -verbose

/opt/zimbra/bin/zmcertmgr createca -new
/opt/zimbra/bin/zmcertmgr createcrt -new -days 365
/opt/zimbra/bin/zmcertmgr deploycrt self
/opt/zimbra/bin/zmcertmgr deployca

Above command might give below error.
** Saving global config key zimbraCertAuthorityCertSelfSigned...failed.
** Saving global config key zimbraCertAuthorityKeySelfSigned...failed.


Restart the services:

su - zimbra -c "zmcontrol stop"
su - zimbra -c "zmcontrol start"

and reenter the command to deploy the certificate on ldap: this time it should not give any error

/opt/zimbra/bin/zmcertmgr deploycrt self
/opt/zimbra/bin/zmcertmgr deployca