Certificate problem

[Panchux]

Somehow certificate got messed up and I'm trying to recreate it following the Wiki but this command gives an error

/opt/zimbra/bin # ./zmcertmgr deployca -localonly
** Importing CA /opt/zimbra/ssl/zimbra/ca/ca.pem into CACERTS...done.
** Copying CA to /opt/zimbra/conf/ca...done.
unable to load certificate
22374:error:0906D06C:PEM routines:PEM_read_bio:no start lineem_lib.c:650:Expecting: TRUSTED CERTIFICATE

Any help would be much appreciated (we are without mail server),

Pancho

[phoenix]

How about this to start: site:zimbra.com "PEM routines:PEM_read_bio:no start l" - Yahoo! Search Results

[Panchux]

Bill, thank you for all your help.

I managed to start the server again but I'm not very confident about how the certificates were installed since I've got a lot of errors deploying the key/certificate

 ./zmcertmgr deploycrt self
** Saving server config key zimbraSSLCertificate...failed.
** Saving server config key zimbraSSLPrivateKey...failed.
** Installing mta certificate and key...done.
** Installing slapd certificate and key...done.
** Installing proxy certificate and key...done.
** Creating pkcs12 file /opt/zimbra/ssl/zimbra/jetty.pkcs12...done.
** Creating keystore file /opt/zimbra/mailboxd/etc/keystore...done.
** Installing CA to /opt/zimbra/conf/ca...done.

# ./zmprov -l gcf zimbraCertAuthorityKeySelfSigned
ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.naming.CommunicationException mail.unitan.net:389)

 # ./zmprov -l gcf zimbraCertSelfSigned
ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.naming.CommunicationException mail.unitan.net:389)

Thanks again,

Pancho

p/s: please send me a PM telling where do I send the beer. I mean it.