Results 1 to 5 of 5

Thread: How to install new certificates?

  1. #1
    gdseas is offline Junior Member
    Join Date
    Jun 2012
    Location
    USA
    Posts
    8
    Rep Power
    2

    Default How to install new certificates?

    Hello, I have just installed ZImbra 7,1,3 FOSS on Ubunu 10.04 64-bit and everything is working well. So far on this mail server, I am using the default, Zimbra Collaboration Suite certificates.

    However, I work for the government and I am required to have server certificates that are signed and issued by a trusted third party and given to me by the government.

    So, I have been given two files, a .key and a .der file. When I try to verify them, they match but then get an error:

    /opt/zimbra/bin/zmcertmgr verifycrt comm x.key x.der
    ** Verifying x.der against x.key
    Certificate (x.der) and private key (x.key) match.
    Error loading file /opt/zimbra/ssl/zimbra/commercial/commercial_ca.crt
    usage: verify [-verbose] [-CApath path] [-CAfile file] [-purpose purpose] [-crl_check] [-engine e] cert1 cert2 ...
    recognized usages:
    sslclient SSL client
    sslserver SSL server
    nssslserver Netscape SSL server
    smimesign S/MIME signing
    smimeencrypt S/MIME encryption
    crlsign CRL signing
    any Any Purpose
    ocsphelper OCSP helper
    timestampsign Time Stamp signing
    XXXXX ERROR: Invalid Certificate:

    Given these two files, what do I need to do to load these two files and create a certificate for my server?

    I have been looking at the following docs but I am lost....
    Administration Console and CLI Certificate Tools - Zimbra :: Wiki

    Thank you for your help!

  2. #2
    michael24 is offline Special Member
    Join Date
    Oct 2010
    Location
    Avondale, AZ
    Posts
    111
    Rep Power
    4

    Default

    Quote Originally Posted by gdseas View Post
    Hello, I have just installed ZImbra 7,1,3 FOSS on Ubunu 10.04 64-bit and everything is working well. So far on this mail server, I am using the default, Zimbra Collaboration Suite certificates.

    However, I work for the government and I am required to have server certificates that are signed and issued by a trusted third party and given to me by the government.

    So, I have been given two files, a .key and a .der file. When I try to verify them, they match but then get an error:

    /opt/zimbra/bin/zmcertmgr verifycrt comm x.key x.der
    ** Verifying x.der against x.key
    Certificate (x.der) and private key (x.key) match.
    Error loading file /opt/zimbra/ssl/zimbra/commercial/commercial_ca.crt
    usage: verify [-verbose] [-CApath path] [-CAfile file] [-purpose purpose] [-crl_check] [-engine e] cert1 cert2 ...
    recognized usages:
    sslclient SSL client
    sslserver SSL server
    nssslserver Netscape SSL server
    smimesign S/MIME signing
    smimeencrypt S/MIME encryption
    crlsign CRL signing
    any Any Purpose
    ocsphelper OCSP helper
    timestampsign Time Stamp signing
    XXXXX ERROR: Invalid Certificate:

    Given these two files, what do I need to do to load these two files and create a certificate for my server?

    I have been looking at the following docs but I am lost....
    Administration Console and CLI Certificate Tools - Zimbra :: Wiki

    Thank you for your help!
    Where are the Certs from(i.e Godaddy, Verisign, etc.)
    ____________________
    Michael

  3. #3
    gdseas is offline Junior Member
    Join Date
    Jun 2012
    Location
    USA
    Posts
    8
    Rep Power
    2

    Default

    Quote Originally Posted by michael24 View Post
    Where are the Certs from(i.e Godaddy, Verisign, etc.)
    I have no idea and I don't know if I can find out either...

  4. #4
    michael24 is offline Special Member
    Join Date
    Oct 2010
    Location
    Avondale, AZ
    Posts
    111
    Rep Power
    4

    Default

    That might be the key you need to as Go Daddy Certs and Zimbra do not get along there is a trick to loading them.

    Also where did you get the .csr from?
    ____________________
    Michael

  5. #5
    michael24 is offline Special Member
    Join Date
    Oct 2010
    Location
    Avondale, AZ
    Posts
    111
    Rep Power
    4

    Default

    This might help you out as well it is for Go Daddy but most the steps are the same for every ssl provider.

    IT Bang Bang: Installing $12.99 GoDaddy SSL Certificate on Zimbra versions 5 and 6
    ____________________
    Michael

Thread Information

Users Browsing this Thread

There are currently 1 users browsing this thread. (0 members and 1 guests)

Similar Threads

  1. Zimbra new install by newbie
    By Jimbo99 in forum Installation
    Replies: 3
    Last Post: 09-25-2011, 12:35 PM
  2. Replies: 0
    Last Post: 01-15-2008, 01:33 PM
  3. Replies: 21
    Last Post: 09-27-2007, 11:49 AM
  4. Replies: 16
    Last Post: 11-29-2006, 10:36 AM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •