I'm getting an error when running the 3rd command of the 3 commands to generate a new self-signed SSL cert.
According to the
ZCS OS 7.1.2 Release Notes, page 9-10, we're supposed to run:
• sudo zmcertmgr createca -new
• sudo zmcertmgr deployca
• sudo zmcertmgr deploycrt self -new
But I get the following output and error on the 3rd command:
1st command ran ok:
Code:
[zimbra@mybox ~]$ sudo zmcertmgr createca -new
** Creating /opt/zimbra/ssl/zimbra/ca/zmssl.cnf...done
** Creating CA private key /opt/zimbra/ssl/zimbra/ca/ca.key...done.
** Creating CA cert /opt/zimbra/ssl/zimbra/ca/ca.pem...done.
2nd command ran ok, too:
Code:
[zimbra@mybox ~]$ sudo zmcertmgr deployca
** Importing CA /opt/zimbra/ssl/zimbra/ca/ca.pem into CACERTS...done.
** Saving global config key zimbraCertAuthorityCertSelfSigned...done.
** Saving global config key zimbraCertAuthorityKeySelfSigned...done.
** Copying CA to /opt/zimbra/conf/ca...done.
3rd command had errors:
Code:
[zimbra@mybox ~]$ sudo zmcertmgr deploycrt self -new
Can't deploy cert for -new. Unknown service.
[zimbra@mybox ~]$ sudo zmcertmgr deploycrt self new
Can't deploy cert for new. Unknown service.
[zimbra@mybox ~]$ sudo zmcertmgr deploycrt self
** Saving server config key zimbraSSLCertificate...done.
** Saving server config key zimbraSSLPrivateKey...done.
** Installing mta certificate and key...done.
** Installing slapd certificate and key...done.
** Installing proxy certificate and key...done.
** Creating pkcs12 file /opt/zimbra/ssl/zimbra/jetty.pkcs12...done.
** Creating keystore file /opt/zimbra/mailboxd/etc/keystore...done.
** Installing CA to /opt/zimbra/conf/ca...done.
[zimbra@mybox ~]$
As you can see, I tried it without the "-new" tag and it ran successfully. My question is: Is that the way it's supposed to be?