[SOLVED] Godaddy SSL certificate installation

[salu]

Anybody knows how to install godaddy SSL certificate on Zimbra network edition Professional 5.06GA? The doucment on Zimbra Wiki is not clear. I tried several times, but failed. Please help!!!

[mmorse]

Are you following this article? Commercial Certificate in 5.x - Zimbra :: Wiki

Other's hit this issue on 5.0.6:
Bug 28085 – zmcertmgr doesn't break down the concatenated commercial cert from Ldap
http://www.zimbra.com/forums/adminis...html#post95454

Admin console:
A) The easiest workaround is to specify "--- All Servers ---" as the target server when installing the commericial cert from the admin console.

CLI:
B) The other way is to create the commercial_ca.crt (concantenated chain file) manually under /opt/zimbra/ssl/zimbra/commercial.
Order of the GoDaddy chain certs for concatenation:
* RootCA
* gd_cross_intermediate.crt
* gd_intermediate.crt
* server_name.crt
Then use the zmcertmgr command.

[salu]

Thanks mmorse! let me make my situation more clear.
We bought SSL certificate from Goddy since we get warning message of "There is a problem with this website's security certificate". Then we generated CSR file in Admin console and sent to Godaddy. We get server_name.crt file from Godaddy and we also download RootCA, gd_cross_intermediate.crt and gd_intermediate.crt file from their website. We tried install those certificate files from Admin console, but always get error message of "Your certificate was not installed due to the error: system failure:XXXXX ERROR: Invalid Certificate:"

Thanks in advance!

[dwmtractor]

I had the same problem till I loaded the cert for "All Servers." Take a look at this post:
http://www.zimbra.com/forums/adminis...html#post95868

[salu]

Thanks everybody for your very useful info.

[natediggs]

So I followed the instructions in the above threads and installed my GoDaddy cert. Now I am unable to connect through an SSL connection. Is there anything I can do to reinstall the self signed cert and start from scratch?

[dwmtractor]

Originally Posted by natediggs

So I followed the instructions in the above threads and installed my GoDaddy cert. Now I am unable to connect through an SSL connection. Is there anything I can do to reinstall the self signed cert and start from scratch?

If it really installed, you might try connecting from another browser/machine and see if the problem is server side or client side. If another machine connects, you may have to delete the old self-signed cert & path from your browser because it sees the new cert and thinks something is rotten. . .

[natediggs]

I actually just decided to start from scratch and recreate a new keystore. Now I've generated the CSR and created a GoDaddy cert from it and I get this error:
Your certificate was not installed due to the error : system failure: XXXXX ERROR: Unmatching certificate (/opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp/current.crt) and private key (/opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp/current_comm.key) pair.

So it seems I have a mismatched key pair. Any idea how I can reinstall it?

[dwmtractor]

I'm just guessing here, but a guess is better than nothing, I hope (?).

How, exactly, did you generate the new keystore? Did you stop & restart Zimbra services after doing so? I'm wondering if perhaps the CSR was generated on the old key because of not restarting Zimbra?

[natediggs]

I recreated the keystore using steps I found on the Wiki and have restarted the server several times.