[SOLVED] Installing Comodo SSL : XXXXX ERROR: Invalid Certificate

[rbreck]

I am having trouble getting a Comodo cert installed from the GUI or CLI.

[root@webmail robb]# /opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key ./commercial.crt ./ca_chain.crt

** Verifying ./commercial.crt against /opt/zimbra/ssl/zimbra/commercial/commercial.key
Certificate (./commercial.crt) and private key (/opt/zimbra/ssl/zimbra/commercial/commercial.key) match.
XXXXX ERROR: Invalid Certificate: ./commercial.crt: /C=US/ST=UT/L=Salt Lake City/O=The USERTRUST Network/OU=http://www.usertrust.com/CN=UTN-USERFirst-Hardware
error 2 at 2 depth lookup:unable to get issuer certificate

I saw a similar issue in the forums and the guy mentioned that he'd chosen "Apache/ModSSL" instead of Tomcat when he submitted the csr. I made the same mistake and asked Comodo about it and they said they only check that for informational purposes, it doesn't affect the certificate generated.

Is there anything else that could be causing this?

[rbreck]

Sorry to bump -- just wondering if anyone has ever seen this issue? Our old certificate expires today and I'm desperate to get the new one installed

[rbreck]

Woo, I got it working.

I went to another one of our Zimbra servers and compared the ca-bundles from comodo. The one they sent this time only had 2 certificates chained, but the one they sent last time had 3.

I tried the one they sent for the other server with this server and it works great. Guess it's an issue on their end.

Haha.