Certificate problem with SMTP using TLS

[yuit]

I've installed zimbra, and its been up and running fine.
I can connect through IMAP with Thunderbird using TLS, and the webmail works wonderfully.

The current problem is that I can't send emails through my Zimbra server's SMTP port (Port 25) with my Thunderbird email client when I have TLS turned on:
Settings:
- Use name and password -> Yes
- Use secure connection: -> TLS, if available

Thunderbird fails, giving me the error message:
"You have received an invalid certificate. Please contact the server administrator or email correspondent and give them the following information:
Your certificate contains the same serial number as another certificate issued by the certificate authroity. Please get a new certificate containing a unique number"

Thunderbird successfully sends out the emails once I choose
- Use secure connection: -> None
everything else unchanged.

I have tried regenerating my certificates using instructions found here:
http://wiki.zimbra.com/index.php?tit...icate_Problems ,
as well as reinstalling Zimbra, to no avail. I still get the same certificate error message.

I am running zimbra-core-4.0.3_GA_406.RHEL4-20061016134107.i386.rpm on CENTOS 4.3.

Any ideas how I can send emails with Thunderbird, TLS turned on?

[jdell]

did you let zimbra installer generate it's own certificate, or did you install one afterwards?

[yuit]

> did you let zimbra installer generate it's own certificate, or did you install one afterwards?

I let zimbra's installer generate its own certificate - but I still get this same error after trying to re-install the certiifcates (http://wiki.zimbra.com/index.php?tit...cate_Problems), so I am not sure why.

[jdell]

perhaps you have accepted permanently a bad certificate in Thunderbird? Check your preferences -> privacy -> security -> view certificates and delete anything that shouldn't be there.

I believe when Tbird/FF prompt you to 'accept permanently' an SSL cert, it is added into there and can cause conflicts like you are seeing.

I remember getting this error in Firefox, but I don't recall the exact steps to get it, but the resolution was clearing out the 'accepted' certificates.

[yuit]

Thank you! You were correct!

It was due to the fact that I set Thunderbird to accept permanently the previous certificate generated by my prevoius zimbra installation.

Problem solved!
Thanks again for your great help!