Zimbra

madods · #1 (**permalink**) 10-03-2010, 03:00 AM

Hi,

My self signed Zimbra SSL certificates have expired, and the effect is I cannot start Zimbra at all:

$ ./zmcontrol startup
Host [fqdn]
Starting ldap...Done.
Unable to determine enabled services from ldap.
Unable to determine enabled services. Cache is out of date or doesn't exist.

I found this thread in the forums:

[SOLVED] Certificate Expire problem - A network service error has occurred.

Which pointed me to:
Recreating a Self-Signed SSL Certificate in ZCS 4.5 & 5.0 - Zimbra :: Wiki

but that is for version 4.5 and 5.0 whereas I am running:

Release 6.0.0_GA_1802.UBUNTU8 UBUNTU8 FOSS edition.

There is a link to:

Administration Console and CLI Certificate Tools - Zimbra :: Wiki

which applies to version 6.0 but I'm unsure of what I need to do. Do I need to recreate a whole new CA and all certificates, or do I just create new certificates in the existing CA?

Is there a detailed document for doing this in V6.0 that I've missed?

uxbod · #2 (**permalink**) 10-04-2010, 02:16 AM

Welcome to the forums

You should just be able to do the following as root

Code:

zmcertmgr deploycrt self -new

madods · #3 (**permalink**) 10-04-2010, 02:30 AM

Quote:

Originally Posted by uxbod

Welcome to the forums

You should just be able to do the following as root

Code:

zmcertmgr deploycrt self -new

Thanks for the welcome.

Wow, that's considerably simpler than I expected from the solutions for older versions!

I looked that command up in the Administration Console and CLI Certificate Tools - Zimbra :: Wiki document. (The -new option isn't listed in the deploycrt section.) It seems that new certificates would be created using the existing CA. Is that correct?

Does that zmcertmgr command take care of all the removal of the certificates from the various keystores that are included in the instructions in the Recreating a Self-Signed SSL Certificate in ZCS 4.5 & 5.0 - Zimbra :: Wiki document?