I'm with this problem and can't solve yet. I have 2 server, one of them runs only MTA/Antispam.
Before upgrade to ZCS-7.1 , MTA server do not start. I tthink about key problems, because when I tried to recreate certs I have this error:
[zimbra@mail1 root]$ zmsshkeygen
Generating public/private dsa key pair.
Your identification has been saved in /opt/zimbra/.ssh/zimbra_identity.
Your public key has been saved in /opt/zimbra/.ssh/zimbra_identity.pub.
The key fingerprint is:
ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.net.ssl.SSLHandshakeException sun.security.validator.ValidatorException: PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderE xception: unable to find valid certification path to requested target)
Please, some one have any tip? (I find google and forum, nothing seems works to me)