lost connection after STARTTLS

[rmvg]

I have been tring to use an IMAP client to connect to zimbra and send emails but it is broken and i keep getting this in my logs.

This is a fresh install of M2 on fedora core 3 but i forgot to enable https during the initial setup this has caused me some problems one being that i can login from http and https undesirable and this new problem.

Seems there is a certificate missing or something can i create one without doing a reinstall? Or should i reinstall and hopfully fix both problems? If i do reinstall can i select no to upgrade and then yes to save users and mailboxes?



Nov 28 08:43:56 shoemasters postfix/smtpd[14794]: initializing the server-side TLS engine
Nov 28 08:43:56 shoemasters postfix/smtpd[14794]: warning: cannot get certificate from file /opt/zimbra/conf/smtpd.crt
Nov 28 08:43:56 shoemasters postfix/smtpd[14794]: warning: TLS library problem: 14794:error:02001002:system library:fopen:No such file or directory:bss_file.c:259:fopen('/opt/zimbra/conf/smtpd.crt','r'):
Nov 28 08:43:56 shoemasters postfix/smtpd[14794]: warning: TLS library problem: 14794:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:261:
Nov 28 08:43:56 shoemasters postfix/smtpd[14794]: warning: TLS library problem: 14794:error:140DC002:SSL routines:SSL_CTX_use_certificate_chain_file:system lib:ssl_rsa.c:758:
Nov 28 08:43:56 shoemasters postfix/smtpd[14794]: cannot load RSA certificate and key data
Nov 28 08:43:56 shoemasters postfix/smtpd[14794]: connect from digi.spots.ab.ca[209.115.173.9]

[KevinH]

Did you try to just recreate the certs?

[rmvg]

I recreated the certs it broke some more things and now get this error when trying to start zimbra using zmcontrol start

ERROR: service.FAILURE (system failure: getDirectContext) (cause: javax.naming.CommunicationException shoemasters.com:389)

Also i got some java errors that according to this post
certs

are ok but one error during about line 47 print or something during the command zmtlsctl https


Kevin if i do an upgrade using the the .install.sh are my chances pretty good? ie do not want to loose users emails again however it has only been a couple of days?

Do you u think upgrade will fix and my http and https prob or is this an error you have come across before?

[KevinH]

install.sh can do an overinstall. You could try that and just let it reinstall the pkgs but keep the data.

[rmvg]

does that mean click yes or no to upgrade?

[KevinH]

yes for upgrade.

[rmvg]

the setup cannot seem to use port 389 for ldap and will not let me set to 389 which causes me to exit without changes

All this kinda makes sense cause it relates to the error i am getting while tring to start/stop zimbra seems like neither zimbra or ldap are running.

[root@shoemasters zcs]# ps -aux |grep ldap
Warning: bad syntax, perhaps a bogus '-'? See /usr/share/doc/procps-3.2.3/FAQ
root 10182 0.0 0.1 3728 644 pts/1 S+ 13:18 0:00 grep ldap

[root@shoemasters zcs]# ps -aux |grep zimbra
Warning: bad syntax, perhaps a bogus '-'? See /usr/share/doc/procps-3.2.3/FAQ
root 10254 0.0 0.1 3728 644 pts/1 S+ 13:24 0:00 grep zimbra

[rmvg]

I tried using a different port but that doesnt work either

Please enter the ldap server port 10389
Checking ldap on localhost:10389...FAILED

[marcmac]

On an upgrade, it attempts to start ldap, and connect to it to verify that your ldap host/passwd/port are correct.

If ldap isn't starting, the re-install won't work. Let me check on the cert creation error, and post another fix.

[marcmac]

The print error in zmcertinstall is complaining that the certificate file can't be found - so let's try recreating your certs.

Run, as zimbra:
sh -x bin/zmcreatecert

and post the output.