Comments on: How to create new CA on Zimbra 5.0 . http://www.aoddy.com/2008/03/04/how-to-create-new-ca-on-zimbra-50/ If you lose yourself, you lose everything. -- Michael Scofield Fri, 26 Feb 2010 16:49:35 +0000 http://wordpress.org/?v=2.9.1 hourly 1 By: wizpva http://www.aoddy.com/2008/03/04/how-to-create-new-ca-on-zimbra-50/comment-page-1/#comment-553 wizpva Fri, 26 Feb 2010 16:49:35 +0000 http://www.aoddy.com/2008/03/04/how-to-create-new-ca-on-zimbra-50/#comment-553 Hello Thanks for your excellent post. May can you help us ? We use a 6.0 zimbra open source edition on a suse linux We need to generate new certificate and we follow your proc even if it was for 5.0. Everything seems good but we have the following : mailbox Stopped zmmailboxdctl is not running. and a zmprov give : [] INFO: I/O exception (java.net.ConnectException) caught when processing request: Connection refused [] INFO: Retrying request ERROR: zclient.IO_ERROR (invoke Connection refused, server: localhost) (cause: java.net.ConnectException Connection refused) Have you any idea ? Thanks Best regards Hello

Thanks for your excellent post. May can you help us ?

We use a 6.0 zimbra open source edition on a suse linux
We need to generate new certificate and we follow your proc even if it was for 5.0.
Everything seems good but we have the following :

mailbox Stopped
zmmailboxdctl is not running.

and a zmprov give :

[] INFO: I/O exception (java.net.ConnectException) caught when processing request: Connection refused
[] INFO: Retrying request
ERROR: zclient.IO_ERROR (invoke Connection refused, server: localhost) (cause: java.net.ConnectException Connection refused)

Have you any idea ?

Thanks
Best regards

]]> By: Oh http://www.aoddy.com/2008/03/04/how-to-create-new-ca-on-zimbra-50/comment-page-1/#comment-436 Oh Tue, 25 Aug 2009 11:02:53 +0000 http://www.aoddy.com/2008/03/04/how-to-create-new-ca-on-zimbra-50/#comment-436 Like TLS init def ctx failed: -1 you can see at http://www.zimbra.com/forums/administrators/23369-huge-problem-after-upgrade-tls-init-def-ctx-failed-1-a.html#post112782 Like TLS init def ctx failed: -1 you can see at http://www.zimbra.com/forums/administrators/23369-huge-problem-after-upgrade-tls-init-def-ctx-failed-1-a.html#post112782

]]> By: Help http://www.aoddy.com/2008/03/04/how-to-create-new-ca-on-zimbra-50/comment-page-1/#comment-399 Help Fri, 31 Jul 2009 10:27:00 +0000 http://www.aoddy.com/2008/03/04/how-to-create-new-ca-on-zimbra-50/#comment-399 Help me!!! root@mail:~# /opt/zimbra/bin/zmcertmgr deployca ** Importing CA /opt/zimbra/ssl/zimbra/ca/ca.pem into CACERTS...done. ** Saving global config key zimbraCertAuthorityCertSelfSigned...failed. ** Saving global config key zimbraCertAuthorityKeySelfSigned...failed. ** Copying CA to /opt/zimbra/conf/ca...done. Help me!!!

root@mail:~# /opt/zimbra/bin/zmcertmgr deployca
** Importing CA /opt/zimbra/ssl/zimbra/ca/ca.pem into CACERTS…done.
** Saving global config key zimbraCertAuthorityCertSelfSigned…failed.
** Saving global config key zimbraCertAuthorityKeySelfSigned…failed.
** Copying CA to /opt/zimbra/conf/ca…done.

]]> By: aoddy http://www.aoddy.com/2008/03/04/how-to-create-new-ca-on-zimbra-50/comment-page-1/#comment-293 aoddy Wed, 13 May 2009 07:29:55 +0000 http://www.aoddy.com/2008/03/04/how-to-create-new-ca-on-zimbra-50/#comment-293 After you generate a new certificate complete, you should generate .der file for your web browser, too. 204 cd ssl/ 205 ls 206 cd zimbra 207 ls 208 cd ca/ 209 ls 210 pwd 211 openssl x509 -in ca.pem -out ca.der -outform DER After you generate a new certificate complete, you should generate .der file for your web browser, too.

204 cd ssl/
205 ls
206 cd zimbra
207 ls
208 cd ca/
209 ls
210 pwd
211 openssl x509 -in ca.pem -out ca.der -outform DER

]]>