LDAP Error 256 while upgrading

[OfMacAndMen]

While updating from 5.09 to 5.11 I'm getting an LDAP failed with exit code 256.

Here is the /tmp/zmsetup.log


Fri Dec 26 08:32:37 2008 Operations logged to /tmp/zmsetup.12262008-083237.log
Fri Dec 26 08:32:37 2008 Getting installed packages
Fri Dec 26 08:32:39 2008 Getting local config zimbra_server_hostname
Fri Dec 26 08:32:39 2008 Getting local config ldap_url
Fri Dec 26 08:32:39 2008 zimbra_server_hostname contained in ldap_url checking ldap status
Fri Dec 26 08:32:39 2008 Checking ldap status.
Fri Dec 26 08:32:39 2008 *** Running as zimbra user: /opt/zimbra/bin/ldap status
Fri Dec 26 08:32:40 2008 Starting ldap...
Fri Dec 26 08:32:40 2008 *** Running as zimbra user: /opt/zimbra/sleepycat/bin/db_recover -h /opt/zimbra/openldap-data
Fri Dec 26 08:32:40 2008 *** Running as zimbra user: /opt/zimbra/libexec/zmldapapplyldif
IO::Socket::INET: connect: Connection refused at /opt/zimbra/libexec/zmldapapplyldif line 145.
Fri Dec 26 08:33:24 2008 *** Running as zimbra user: /opt/zimbra/bin/ldap status
Fri Dec 26 08:33:24 2008 *** Running as zimbra user: /opt/zimbra/bin/ldap start
Failed to start slapd. Attempting debug start to determine error.
TLS: error:0906D06C:PEM routines:PEM_read_bio:no start line pem_lib.c:647
TLS: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib ssl_rsa.c:491
main: TLS init def ctx failed: -1

Fri Dec 26 08:34:06 2008 failed with exit code 256.
Fri Dec 26 08:35:47 2008 checking isEnabled zimbra-core
Fri Dec 26 08:35:47 2008 zimbra-core not in enabled cache
Fri Dec 26 08:35:47 2008 enabled packages
Fri Dec 26 08:35:47 2008 zimbra_server_hostname contained in ldap_url checking ldap status
Fri Dec 26 08:35:47 2008 Checking ldap status.
Fri Dec 26 08:35:47 2008 *** Running as zimbra user: /opt/zimbra/bin/ldap status
Fri Dec 26 08:35:47 2008 Starting ldap...
Fri Dec 26 08:35:47 2008 *** Running as zimbra user: /opt/zimbra/sleepycat/bin/db_recover -h /opt/zimbra/openldap-data
Fri Dec 26 08:35:47 2008 *** Running as zimbra user: /opt/zimbra/libexec/zmldapapplyldif
IO::Socket::INET: connect: Connection refused at /opt/zimbra/libexec/zmldapapplyldif line 145.
Fri Dec 26 08:36:31 2008 *** Running as zimbra user: /opt/zimbra/bin/ldap status
Fri Dec 26 08:36:32 2008 *** Running as zimbra user: /opt/zimbra/bin/ldap start
Failed to start slapd. Attempting debug start to determine error.
TLS: error:0906D06C:PEM routines:PEM_read_bio:no start line pem_lib.c:647
TLS: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib ssl_rsa.c:491
main: TLS init def ctx failed: -1

[iway]

Do you have mismatching server name and SSL certificates?

[riversw]

I am, too having the same and similar problems. How can you verify the certificates during install? thks,

[moedaellc]

I am also having the same problem after trying to upgrade from 5.0.10 to 5.0.11. The certificate had expired and I tried using the admin gui to create a new cert but it kept giving the jetty error. I tried the cli to recreate and again got errors that the state in the CA didn't match. Finally tried an upgrade since I read it creates a self signed and now I get the same error as the first poster.

Sun Dec 28 04:24:47 2008 *** Running as zimbra user: /opt/zimbra/sleepycat/bin/db_recover -h /opt/zimbra/openldap-data
Sun Dec 28 04:24:49 2008 *** Running as zimbra user: /opt/zimbra/libexec/zmldapapplyldif
IO::Socket::INET: connect: Connection refused at /opt/zimbra/libexec/zmldapapplyldif line 145.
Sun Dec 28 04:25:36 2008 *** Running as zimbra user: /opt/zimbra/bin/ldap status
Sun Dec 28 04:25:40 2008 *** Running as zimbra user: /opt/zimbra/bin/ldap start
Failed to start slapd. Attempting debug start to determine error.
TLS: error:0906D06C:PEM routines:PEM_read_bio:no start line pem_lib.c:647
TLS: error:140AD009:SSL routines:SSL_CTX_use_certificate_file:PEM lib ssl_rsa.c:491
main: TLS init def ctx failed: -1

[moedaellc]

Fixed the problem using the Recreate CA Cert wiki entry