[SOLVED] Expired Cert in 5.0GA can cause mail Delivery failure

[fultonj]

Never mind. They were on my SMTP servers. I'm setting up a multi-server install and I was looking for them on my LDAP server.

[zimbra@zsmtp0 ~]$ ls /opt/zimbra/conf/ldap*

/opt/zimbra/conf/ldap-scm.cf        /opt/zimbra/conf/ldap-vam.cf

/opt/zimbra/conf/ldap-transport.cf  /opt/zimbra/conf/ldap-vmd.cf

/opt/zimbra/conf/ldap-vad.cf        /opt/zimbra/conf/ldap-vmm.cf

[zimbra@zsmtp0 ~]$

Here's how I applied the fix:

for x in ldap-scm.cf ldap-transport.cf ldap-vad.cf ldap-vam.cf ldap-vmd.cf ldap-vmd.cf;

   do

       cp $x $x.bak;

       sed -i s/"start_tls =yes"/"start_tls = no"/g $x;

done

[m-cubed]

I had tested Zimbra v4 on Ubuntu a while and then went up through the v5 betas. Ended up spending most of my time configuring LDAP and Samba so I did not even get the mail server live. Started working on testing the mail server after upgrading to Zimbra from 5.0.0_RC2_1745 to 5.0.2_GA_1975.

Of course I could not get mail to send. I think the most telling errors are...

lisa postfix/trivial-rewrite[9772]: warning: dict_ldap_connect: Unable to bind to server ldap://mail.themorrells.org:389 as uid=zmpostfix,cn=appaccts,cn=zimbra: 49 (Invalid credentials)

lisa postfix/trivial-rewrite[12622]: fatal: ldap:/opt/zimbra/conf/ldap-vad.cf(0,lock|fold_fix): table lookup problem

So I followed on the forums on fixing the TLS errors which seemed to be relevant with no luck. Can anyone help? Where should I start?

[fultonj]

I confirm that upgrading to 5.02 fixed this issue and the hack described earlier to disable TLS is no longer necessary.

[PFC-PEDER]

I am having the same issues and I got to the step of creating the new cert and I get the following. Any ideas?

root@zimbra:/opt/zimbra/bin# /opt/zimbra/bin/zmcertmgr createca
** Creating directory /opt/zimbra/ssl/zimbra
** Creating directory /opt/zimbra/ssl/zimbra/ca
** Creating directory /opt/zimbra/ssl/zimbra/server
** Creating directory /opt/zimbra/ssl/zimbra/commercial
** Creating /opt/zimbra/ssl/zimbra/ca/zmssl.cnf...done
** Retrieving CA private key from ldap...done.
** Retrieving CA cert from ldap...failed.
** Creating CA cert /opt/zimbra/ssl/zimbra/ca/ca.pem...failed.

/opt/zimbra/ssl/zimbra/ca/ca.csr: No such file or directory

[Lewisvee]

Originally Posted by PFC-PEDER

I am having the same issues and I got to the step of creating the new cert and I get the following. Any ideas?

root@zimbra:/opt/zimbra/bin# /opt/zimbra/bin/zmcertmgr createca
** Creating directory /opt/zimbra/ssl/zimbra
** Creating directory /opt/zimbra/ssl/zimbra/ca
** Creating directory /opt/zimbra/ssl/zimbra/server
** Creating directory /opt/zimbra/ssl/zimbra/commercial
** Creating /opt/zimbra/ssl/zimbra/ca/zmssl.cnf...done
** Retrieving CA private key from ldap...done.
** Retrieving CA cert from ldap...failed.
** Creating CA cert /opt/zimbra/ssl/zimbra/ca/ca.pem...failed.

/opt/zimbra/ssl/zimbra/ca/ca.csr: No such file or directory

Any updates why /opt/zimbra/ssl/zimbra/ca/ca.csr: No such file or directory error is shown