Search found 898 matches

by JDunphy
Thu Jan 13, 2022 7:43 pm
Forum: Administrators
Topic: Error on deploying SSL certificates
Replies: 40
Views: 80964

Re: Error on deploying SSL certificates

I am really rusty in my db admin skills. Don't know if this helps. # su - zimbra % mysql zimbra Reading table information for completion of table and column names You can turn off this feature to get a quicker startup with -A Welcome to the MariaDB monitor. Commands end with ; or \g. Your MariaDB co...
by JDunphy
Thu Jan 13, 2022 6:17 pm
Forum: Administrators
Topic: Error on deploying SSL certificates
Replies: 40
Views: 80964

Re: Error on deploying SSL certificates

Ok... looks like you posted more information while I was writing the previous response. I'll look at what you posted.
by JDunphy
Thu Jan 13, 2022 6:14 pm
Forum: Administrators
Topic: Error on deploying SSL certificates
Replies: 40
Views: 80964

Re: Error on deploying SSL certificates

Glad you are past the SSL certs now. I think I learned quite a bit myself so who doesn't like a good puzzle eh? ;-) That 502... Background. You have an nginx reverse proxy that is listening on ports 80, 443, 993, etc, etc. There is a backend server which is that mailboxd (java) instance and it is li...
by JDunphy
Wed Jan 12, 2022 8:55 pm
Forum: Administrators
Topic: Error on deploying SSL certificates
Replies: 40
Views: 80964

Re: Error on deploying SSL certificates

DEBUG: run(rc=0) results(#=0) ok ** Installing imapd certificate '/opt/zimbra/conf/imapd.crt' and key '/opt/zimbra/conf/imapd.key' ** Copying '/opt/zimbra/ssl/zimbra/commercial/commercial.crt' to '/opt/zimbra/conf/imapd.crt' ** Copying '/opt/zimbra/ssl/zimbra/commercial/commercial.key' to '/opt/zim...
by JDunphy
Wed Jan 12, 2022 4:22 pm
Forum: Administrators
Topic: Error on deploying SSL certificates
Replies: 40
Views: 80964

Re: Error on deploying SSL certificates

I showed an example of how I did it with debug. You are not running my deploy script according to an earlier post so your usage would be something like this. [zimbra@mail tmp]$ /opt/zimbra/bin/zmcertmgr deploycrt comm mail.XXX.com.cer fullchain.cer --debug 3 If you are running my deploy script then ...
by JDunphy
Tue Jan 11, 2022 7:05 pm
Forum: Administrators
Topic: Error on deploying SSL certificates
Replies: 40
Views: 80964

Re: Error on deploying SSL certificates

zmcertmgr has a debug option... add it at the end and it will tell you the commands that are being executed. Here is what I did for my zimbra.sh that I use for the deploy method with acme.sh /opt/zimbra/bin/zmcertmgr deploycrt comm "$_ccert" "${_cca}.real" --debug 3|| return 1 Ca...
by JDunphy
Sun Jan 09, 2022 10:52 pm
Forum: Administrators
Topic: Error on deploying SSL certificates
Replies: 40
Views: 80964

Re: Error on deploying SSL certificates

I don't remember if you showed this already... I am wondering if there is a corrupt keystore/permission/file caused by a manual update, etc. Can you see if you have sane values (non zero) for keystore? # ls -l /opt/zimbra/common/etc/java/cacerts /opt/zimbra/jetty_base/etc/keystore /opt/zimbra/jetty_...
by JDunphy
Sun Jan 09, 2022 4:55 pm
Forum: Administrators
Topic: Error on deploying SSL certificates
Replies: 40
Views: 80964

Re: Error on deploying SSL certificates

Still no luck, any other ideas? Not really. Initially I thought it was a permission problem because it failed on openssl pkcs12 export but now wondering if there is something wrong with openssl or its supporting files. I am looking at the initial link I provided in this thread right now where I sho...
by JDunphy
Sat Jan 08, 2022 5:39 pm
Forum: Administrators
Topic: Error on deploying SSL certificates
Replies: 40
Views: 80964

Re: Error on deploying SSL certificates

Slight progress, modified /etc/hosts file to this and ldap now starts: [zimbra@mail ~]$ cat /etc/hosts 127.0.0.1 localhost.localdomain localhost 51.158.xx.xx mail.XXX.com mail 51.158.xx.xx web-mail.XXX.com web-mail 192.168.168.168 mail.XXX.com mail 10.70.150.43 mail.XXX.com mail [zimbra@mail ~]$ Th...
by JDunphy
Sat Jan 08, 2022 5:28 pm
Forum: Administrators
Topic: Error on deploying SSL certificates
Replies: 40
Views: 80964

Re: Error on deploying SSL certificates

Got ldap started manually: This seems fine, too... I can't understand why it wouldn't let me bind to mail.XXX.com :roll: Just checked the IP the server has, which is local IP, is this the reason it can't bind on the mail.XXX.com domain, as it is set in /etc/hosts? You bind to a local ip address on ...