Zimbra offers Open Source email server software and shared calendar for Linux and the Mac
Go Back   Zimbra :: Forums > Zimbra Collaboration Suite > Administrators

Welcome to the Zimbra :: Forums!
Welcome, if you would like to post a comment please register. We also encourage you to explore all things Zimbra with our team and members of the community.

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 08-01-2010, 03:44 AM
Junior Member
 
Posts: 9
Default openssl problem

Hello

today I had strange problem with ssl. I was trying to deploy commercial ssl certificate from thawte. System's openssl verify was succesfull but zimbra's openssl verify ended with error. See below.

mail:~/w/a# openssl verify -CAfile ca-bundle.cert mail.crt
mail.crt: OK
mail:~/w/a# /opt/zimbra/openssl/bin/openssl verify -CAfile ca-bundle.cert mail.crt
mail.crt: /C=US/O=thawte, Inc./OU=Certification Services Division/OU=(c) 2006 thawte, Inc. - For authorized use only/CN=thawte Primary Root CA
error 2 at 2 depth lookup:unable to get issuer certificate

I was not sure what is the problem with zimbra's openssl and needed to deploy certificate quickly so I workarounded it by:
mv /opt/zimbra/openssl/bin/openssl /opt/zimbra/openssl/bin/openssl.zimbra
ln -s /usr/bin/openssl /opt/zimbra/openssl/bin/openssl

With this workaround I was able to verify and deploy certificate. Do you have idea what is wrong with zimbra's openssl?

Thank you.

Last edited by wooo; 08-04-2010 at 07:23 AM..
Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes


Similar Threads

Why Join?

Registering let's you ask questions, makes it easier to search, displays any files attached to posts, and notifies you about replies.

blog.zimbra.com




 

SEO by vBSEO ©2011, Crawlability, Inc.