I try to install cert on zimbra and have this error....anyone can help?
Thx
[zimbra@mail ~]$ /opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key /tmp/commercial.crt /tmp/commercial_ca.crt
** Verifying '/tmp/commercial.crt' against '/opt/zimbra/ssl/zimbra/commercial/commercial.key'
Certificate '/tmp/commercial.crt' and private key '/opt/zimbra/ssl/zimbra/commercial/commercial.key' match.
** Verifying '/tmp/commercial.crt' against '/tmp/commercial_ca.crt'
ERROR: Unable to validate certificate chain: /tmp/commercial.crt: C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
error 2 at 2 depth lookup:unable to get issuer certificate
Cert install error
- DualBoot
- Elite member
- Posts: 1326
- Joined: Mon Apr 18, 2016 8:18 pm
- Location: France - Earth
- ZCS/ZD Version: ZCS FLOSS - 8.8.15 Mutli servers
- Contact:
Re: Cert install error
Hi,
maybe some certificates are missing between your certifciate and the root one or maybe the root one is missing.
Regards,
maybe some certificates are missing between your certifciate and the root one or maybe the root one is missing.
Regards,
Re: Cert install error
radetic.boris wrote:I try to install cert on zimbra and have this error....anyone can help?
Thx
[zimbra@mail ~]$ /opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key /tmp/commercial.crt /tmp/commercial_ca.crt
** Verifying '/tmp/commercial.crt' against '/opt/zimbra/ssl/zimbra/commercial/commercial.key'
Certificate '/tmp/commercial.crt' and private key '/opt/zimbra/ssl/zimbra/commercial/commercial.key' match.
** Verifying '/tmp/commercial.crt' against '/tmp/commercial_ca.crt'
ERROR: Unable to validate certificate chain: /tmp/commercial.crt: C = US, ST = New Jersey, L = Jersey City, O = The USERTRUST Network, CN = USERTrust RSA Certification Authority
error 2 at 2 depth lookup:unable to get issuer certificate
How did you solve this problem?
- L. Mark Stone
- Ambassador
- Posts: 2800
- Joined: Wed Oct 09, 2013 11:35 am
- Location: Portland, Maine, US
- ZCS/ZD Version: 10.0.7 Network Edition
- Contact:
Re: Cert install error
That error typically means you are missing one or more certs in the chain.
There are issuer-specific wiki articles that document which certs you may need to download separately to be able to build the chain correctly.
Hope that helps,
Mark
There are issuer-specific wiki articles that document which certs you may need to download separately to be able to build the chain correctly.
Hope that helps,
Mark
___________________________________
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
AWS Certified Solutions Architect-Associate
L. Mark Stone
Mission Critical Email - Zimbra VAR/BSP/Training Partner https://www.missioncriticalemail.com/
AWS Certified Solutions Architect-Associate
Re: Cert install error
All is correct. I added the root key to the ca_bundle chain, after that it works!L. Mark Stone wrote:That error typically means you are missing one or more certs in the chain.
There are issuer-specific wiki articles that document which certs you may need to download separately to be able to build the chain correctly.
Hope that helps,
Mark