Replace SSL Certificate

[awilly]

All,

Using Zimbra 7.1.0_GA_3140. Ubuntu.

We have a working SSL Certificate installed. We want to replace it with a new certificate with an additional Subject Alternate Name.

I created a CSR using the Zimbra web administration console and submitted it for signing.

When I tried install the new certificate from the web UI, I received this error:

Your certificate was not installed due to the error: system failure: XXXXX ERROR: Unmatching certificate (/opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp/current.crt) and private key (/opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp/current_com.key) pair.

Zimbra support directed me to use the CLI steps documented here:

Administration Console and CLI Certificate Tools - Zimbra :: Wiki

The paths in some of the steps do not exist on our server, for example:

/opt/zimbra/ssl/zimbra/commercial/

I tried the steps anyway, and received the below error on Step 6 of Single Node Commercial Certificate:

XXXXX ERROR: Can't find private key /opt/zimbra/ssl/zimbra/commerical/commerical.key

The above makes sense because the path doesn't exist.

Ideas appreciated.

[awilly]

It dawned on me to su to root rather than sudo. Looks promising. Will report back.

[awilly]

Now with su to root the path does exist; however, I get the same error I receive in the web ui.

XXXXX ERROR: Unmatching certificate (/tmp/zimbra.sdil.net.crt) and private key (/opt/zimbra/ssl/zimbra/commercial/commercial.key) pair.