[SOLVED] Installing VeriSign Secure Site Pro certificate error

[hemma]

Get: "ZIMBRA IOEXCEPTION while handling uploaded certificate "
See attached screen shot.
Any idea or known work-arounds? We've tried everything posted in the wiki/forum pages.

-------------------------
Background Info:
Release 5.0.15_GA_2851.RHEL5_20090310165728 CentOS5 NETWORK edition

Running on CentOS 5. During the install I used the --override-platform (or something similar) to force it to to installed the RH5 version on CentOS 5 (which is the same thing from a binary standpoint).

zmcontrol status:
Host mail.hytrust.com
antispam Running
antivirus Running
ldap Running
logger Running
mailbox Running
mta Running
snmp Running
spell Running
stats Running

[Ramadan Mansoura]

- check to make sure the certificate file is not corrupt
open the file in a text editor and make sure there are garbage characters in there

[hemma]

okay, i was able to get the certs installed
with the command line steps documented
here.


# zmcertmgr deploycrt comm /tmp/certs/commercial.crt /tmp/certs/verisign_chain.crt
** Verifying /tmp/certs/commercial.crt against /opt/zimbra/ssl/zimbra/commercial/commercial.key
Certificate (/tmp/certs/commercial.crt) and private key (/opt/zimbra/ssl/zimbra/commercial/commercial.key) match.
Valid Certificate: /tmp/certs/commercial.crt: OK
** Copying /tmp/certs/commercial.crt to /opt/zimbra/ssl/zimbra/commercial/commercial.crt
** Appending ca chain /tmp/certs/verisign_chain.crt to /opt/zimbra/ssl/zimbra/commercial/commercial.crt
** Saving server config key zimbraSSLCertificate...done.
** Saving server config key zimbraSSLPrivateKey...done.
** Installing mta certificate and key...done.
** Installing slapd certificate and key...done.
** Installing proxy certificate and key...done.
** Creating pkcs12 file /opt/zimbra/ssl/zimbra/jetty.pkcs12...done.
** Creating keystore file /opt/zimbra/mailboxd/etc/keystore...done.
** Installing CA to /opt/zimbra/conf/ca...done.

-------
NOTE however, the GUI installation still fails with the error noted earlier...with the same *.crt files!

[Ramadan Mansoura]

Thank you for the update