Zimbra offers Open Source email server software and shared calendar for Linux and the Mac
Go Back   Zimbra :: Forums > Zimbra Collaboration Suite > Administrators

Welcome to the Zimbra :: Forums!
Welcome, if you would like to post a comment please register. We also encourage you to explore all things Zimbra with our team and members of the community.

Reply
 
LinkBack Thread Tools Search this Thread Display Modes
  #1 (permalink)  
Old 08-09-2011, 09:59 PM
Senior Member
 
Posts: 69
Exclamation "Can't deploy cert for -new. Unknown service."

I'm getting an error when running the 3rd command of the 3 commands to generate a new self-signed SSL cert.

According to the ZCS OS 7.1.2 Release Notes, page 9-10, we're supposed to run:

• sudo zmcertmgr createca -new
• sudo zmcertmgr deployca
• sudo zmcertmgr deploycrt self -new

But I get the following output and error on the 3rd command:

1st command ran ok:
Code:
[zimbra@mybox ~]$ sudo zmcertmgr createca -new
** Creating /opt/zimbra/ssl/zimbra/ca/zmssl.cnf...done
** Creating CA private key /opt/zimbra/ssl/zimbra/ca/ca.key...done.
** Creating CA cert /opt/zimbra/ssl/zimbra/ca/ca.pem...done.
2nd command ran ok, too:
Code:
[zimbra@mybox ~]$ sudo zmcertmgr deployca
** Importing CA /opt/zimbra/ssl/zimbra/ca/ca.pem into CACERTS...done.
** Saving global config key zimbraCertAuthorityCertSelfSigned...done.
** Saving global config key zimbraCertAuthorityKeySelfSigned...done.
** Copying CA to /opt/zimbra/conf/ca...done.
3rd command had errors:
Code:
[zimbra@mybox ~]$ sudo zmcertmgr deploycrt self -new
Can't deploy cert for -new.  Unknown service.
[zimbra@mybox ~]$ sudo zmcertmgr deploycrt self new 
Can't deploy cert for new.  Unknown service.
[zimbra@mybox ~]$ sudo zmcertmgr deploycrt self    
** Saving server config key zimbraSSLCertificate...done.
** Saving server config key zimbraSSLPrivateKey...done.
** Installing mta certificate and key...done.
** Installing slapd certificate and key...done.
** Installing proxy certificate and key...done.
** Creating pkcs12 file /opt/zimbra/ssl/zimbra/jetty.pkcs12...done.
** Creating keystore file /opt/zimbra/mailboxd/etc/keystore...done.
** Installing CA to /opt/zimbra/conf/ca...done.
[zimbra@mybox ~]$

As you can see, I tried it without the "-new" tag and it ran successfully. My question is: Is that the way it's supposed to be?
Reply With Quote
Reply


Thread Tools Search this Thread
Search this Thread:

Advanced Search
Display Modes


Similar Threads

Why Join?

Registering let's you ask questions, makes it easier to search, displays any files attached to posts, and notifies you about replies.

blog.zimbra.com




 

SEO by vBSEO ©2011, Crawlability, Inc.