[SOLVED] SSL certificats problem

[lamienois]

Hi,

I have a problem with my SSL certificat (globalSign).
The CSR file wasn't created with the admin interface but with openssl -req node....

When i verify my certificat with openssl, it's seems OK.

openssl verify -CAfile /root/ssl/commercial_ca.crt /root/ssl/commercial.crt
/root/ssl/commercial.crt: OK

But when i try to verify my certificate with zmcertmgr, i have this message :

/opt/zimbra/bin/zmcertmgr verifycrt comm commercial.key /root/ssl/commercial.crt
** Verifying /root/ssl/commercial.crt against commercial.key
Certificate (/root/ssl/commercial.crt) and private key (commercial.key) match.
XXXXX ERROR: Invalid Certificate: /root/ssl/commercial.crt: /OU=Organization Validation CA/O=GlobalSign/CN=GlobalSign Organization Validation CA
error 2 at 1 depth lookup:unable to get issuer certificate

and

/opt/zimbra/bin/zmcertmgr deploycrt comm /root/ssl/commercial.crt /root/ssl/commercial_ca.crt
** Verifying /root/ssl/commercial.crt against /opt/zimbra/ssl/zimbra/commercial/commercial.key
Certificate (/root/ssl/commercial.crt) and private key (/opt/zimbra/ssl/zimbra/commercial/commercial.key) match.
XXXXX ERROR: Invalid Certificate: /root/ssl/commercial.crt: /OU=Organization Validation CA/O=GlobalSign/CN=GlobalSign Organization Validation CA
error 2 at 1 depth lookup:unable to get issuer certificate
XXXXX ERROR: provided cert isn't valid.

I have verified my ROOT CA file and it's seems ok.

thanks

[Michael REMY]

hi,

yesterday i had the same problem.

i didn't find a solution too..

thanks for help

[veronica]

its a problem of commercial_ca.crt. you dont have a proper root/intermediate cert bundle.

[lamienois]

Hi,

Thanks veronica.
I created a new bundle cert with good root/intermediate.
After i tried to install my certificat and it worked without problem.

Regards