[SOLVED] 5.0GA: zmprov not working anymore

[fisch09]

Hi,

I just upgraded to 5.0A, had some trouble with an expired CA cert (but could solve it, thanks to the forum).

Issue at the moment:

zimbra@mail:~$ zmprov -s mail.myplace2b.net
[] ERROR: java.security.cert.CertificateExpiredException: NotAfter: Thu Dec 13 00:43:01 EST 2007
ERROR: zclient.IO_ERROR (invoke java.security.cert.CertificateException: Untrusted Server Certificate Chain, server: mail.myplace2b.net) (cause: javax.net.ssl.SSLHandshakeException java.security.cert.CertificateException: Untrusted Server Certificate Chain)

zmprov not working..........

I can see that there is a cert that expired on the 13th of Dec 07.... but where is it - I can not find, I created all new certs.....

thanks for your help
cheers
Andre

[jholder]

Hi Andre-
Does it work if you add -l (that's an L) to the line?

john

[brian]

You'll need to delete your CA cert that is stored in LDAP before recreating, this is fixed in 5.0.1.
See this thread for details.
[SOLVED] Expired Cert in 5.0GA can cause mail Delivery failure

[fisch09]

zmprov -l (lower case L) -> works
I did all the stuff to fix the expired CA and all the cert's are now fine. I checked this in the admin gui.

Cheers
Andre