I get this feedback :
Code: Select all
Restoring existing configuration file from /opt/zimbra/.saveconfig/localconfig.xml...done
Operations logged to /tmp/zmsetup.20190407-232401.log
Adding /opt/zimbra/conf/ca/ca.pem to cacerts
Upgrading from 8.8.11_GA_3737 to 8.8.12_GA_3794
Stopping zimbra services...done.
This appears to be 8.8.11_GA
Starting mysql...done.
Checking ldap status...not running.
Checking ldap status...not running.
Starting ldap...done.
Running mysql_upgrade...done.
Stopping mysql...done.
[] ERROR: could not instantiate Provisioning interface of class 'com.zimbra.cs.account.ldap.LdapProvisioning'; defaulting to LdapProvisioning
java.lang.IllegalStateException: Unable to create CustomTrustManager
at com.zimbra.common.net.TrustManagers.customTrustManager(TrustManagers.java:58)
at com.zimbra.cs.ldap.unboundid.LdapSSLUtil.getTrustManager(LdapSSLUtil.java:84)
at com.zimbra.cs.ldap.unboundid.LdapSSLUtil.createSSLContext(LdapSSLUtil.java:89)
at com.zimbra.cs.ldap.unboundid.LdapConnectionPool.createConnPool(LdapConnectionPool.java:106)
at com.zimbra.cs.ldap.unboundid.LdapConnectionPool.createConnectionPool(LdapConnectionPool.java:63)
at com.zimbra.cs.ldap.unboundid.UBIDLdapContext.init(UBIDLdapContext.java:106)
at com.zimbra.cs.ldap.unboundid.UBIDLdapClient.init(UBIDLdapClient.java:39)
at com.zimbra.cs.ldap.LdapClient.getInstanceIfLDAPavailable(LdapClient.java:62)
at com.zimbra.cs.ldap.LdapClient.getInstance(LdapClient.java:69)
at com.zimbra.cs.ldap.LdapClient.initialize(LdapClient.java:94)
at com.zimbra.cs.account.ldap.LdapProv.<init>(LdapProv.java:47)
at com.zimbra.cs.account.ldap.LdapProvisioning.<init>(LdapProvisioning.java:291)
at com.zimbra.cs.account.ldap.LdapProvisioning.<init>(LdapProvisioning.java:288)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at java.lang.reflect.Constructor.newInstance(Constructor.java:423)
at java.lang.Class.newInstance(Class.java:442)
at com.zimbra.cs.account.Provisioning.getInstance(Provisioning.java:354)
at com.zimbra.cs.account.Provisioning.getInstance(Provisioning.java:310)
at com.zimbra.cs.account.ProvUtil.initProvisioning(ProvUtil.java:1030)
at com.zimbra.cs.account.ProvUtil.main(ProvUtil.java:4133)
Caused by: java.security.KeyStoreException: java.io.FileNotFoundException: /opt/zimbra/common/lib/jvm/java/lib/security/cacerts (No such file or directory)
at com.zimbra.common.net.DefaultTrustManager.<init>(DefaultTrustManager.java:54)
at com.zimbra.common.net.CustomTrustManager.<init>(CustomTrustManager.java:64)
at com.zimbra.common.net.TrustManagers.customTrustManager(TrustManagers.java:56)
... 21 more
Caused by: java.io.FileNotFoundException: /opt/zimbra/common/lib/jvm/java/lib/security/cacerts (No such file or directory)
at java.io.FileInputStream.open0(Native Method)
at java.io.FileInputStream.open(FileInputStream.java:195)
at java.io.FileInputStream.<init>(FileInputStream.java:138)
at java.io.FileInputStream.<init>(FileInputStream.java:93)
at com.zimbra.common.net.DefaultTrustManager.<init>(DefaultTrustManager.java:47)
... 23 more
[] ERROR: defaulting to com.zimbra.cs.account.ldap.LdapProvisioning
Exception in thread "main" java.lang.NullPointerException
at com.zimbra.cs.ldap.unboundid.UBIDLdapOperation$GetConnection.execute(UBIDLdapOperation.java:189)
at com.zimbra.cs.ldap.unboundid.UBIDLdapContext.getConnection(UBIDLdapContext.java:200)
at com.zimbra.cs.ldap.unboundid.UBIDLdapContext.<init>(UBIDLdapContext.java:169)
at com.zimbra.cs.ldap.unboundid.UBIDLdapClient.getContextImpl(UBIDLdapClient.java:90)
at com.zimbra.cs.ldap.LdapClient.getContext(LdapClient.java:135)
at com.zimbra.cs.account.ldap.ZLdapHelper.getAttributes(ZLdapHelper.java:276)
at com.zimbra.cs.account.ldap.LdapHelper.getAttributes(LdapHelper.java:201)
at com.zimbra.cs.account.ldap.LdapProvisioning.getServerByName(LdapProvisioning.java:4200)
at com.zimbra.cs.account.ldap.LdapProvisioning.getServerByNameInternal(LdapProvisioning.java:4188)
at com.zimbra.cs.account.ldap.LdapProvisioning.get(LdapProvisioning.java:4166)
at com.zimbra.cs.account.ProvUtil.lookupServer(ProvUtil.java:3566)
at com.zimbra.cs.account.ProvUtil.doGetServer(ProvUtil.java:4918)
at com.zimbra.cs.account.ProvUtil.execute(ProvUtil.java:1262)
at com.zimbra.cs.account.ProvUtil.main(ProvUtil.java:4137)
Updating zimbraLDAPSchemaVersion to version '1537783098'
Applying updates for 8.8.11_GA
applying 8811GA upgrade changesApplying updates for 8.8.12_GA
applying 8812GA upgrade changes
Updating to CA certs path
Updating global config and COS's with attributes introduced after 8.8.11_GA...failed.
Stopping ldap...done.
Upgrade complete.
Checking ldap status....not running.
Starting ldap...done.
[] ERROR: could not instantiate Provisioning interface of class 'com.zimbra.cs.account.ldap.LdapProvisioning'; defaulting to LdapProvisioning
java.lang.IllegalStateException: Unable to create CustomTrustManager
at com.zimbra.common.net.TrustManagers.customTrustManager(TrustManagers.java:58)
at com.zimbra.cs.ldap.unboundid.LdapSSLUtil.getTrustManager(LdapSSLUtil.java:84)
at com.zimbra.cs.ldap.unboundid.LdapSSLUtil.createSSLContext(LdapSSLUtil.java:89)
at com.zimbra.cs.ldap.unboundid.LdapConnectionPool.createConnPool(LdapConnectionPool.java:106)
at com.zimbra.cs.ldap.unboundid.LdapConnectionPool.createConnectionPool(LdapConnectionPool.java:63)
at com.zimbra.cs.ldap.unboundid.UBIDLdapContext.init(UBIDLdapContext.java:106)
at com.zimbra.cs.ldap.unboundid.UBIDLdapClient.init(UBIDLdapClient.java:39)
at com.zimbra.cs.ldap.LdapClient.getInstanceIfLDAPavailable(LdapClient.java:62)
at com.zimbra.cs.ldap.LdapClient.getInstance(LdapClient.java:69)
at com.zimbra.cs.ldap.LdapClient.initialize(LdapClient.java:94)
at com.zimbra.cs.account.ldap.LdapProv.<init>(LdapProv.java:47)
at com.zimbra.cs.account.ldap.LdapProvisioning.<init>(LdapProvisioning.java:291)
at com.zimbra.cs.account.ldap.LdapProvisioning.<init>(LdapProvisioning.java:288)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at java.lang.reflect.Constructor.newInstance(Constructor.java:423)
at java.lang.Class.newInstance(Class.java:442)
at com.zimbra.cs.account.Provisioning.getInstance(Provisioning.java:354)
at com.zimbra.cs.account.Provisioning.getInstance(Provisioning.java:310)
at com.zimbra.cs.account.ProvUtil.initProvisioning(ProvUtil.java:1030)
at com.zimbra.cs.account.ProvUtil.main(ProvUtil.java:4133)
Caused by: java.security.KeyStoreException: java.io.FileNotFoundException: /opt/zimbra/common/lib/jvm/java/lib/security/cacerts (No such file or directory)
at com.zimbra.common.net.DefaultTrustManager.<init>(DefaultTrustManager.java:54)
at com.zimbra.common.net.CustomTrustManager.<init>(CustomTrustManager.java:64)
at com.zimbra.common.net.TrustManagers.customTrustManager(TrustManagers.java:56)
... 21 more
Caused by: java.io.FileNotFoundException: /opt/zimbra/common/lib/jvm/java/lib/security/cacerts (No such file or directory)
at java.io.FileInputStream.open0(Native Method)
at java.io.FileInputStream.open(FileInputStream.java:195)
at java.io.FileInputStream.<init>(FileInputStream.java:138)
at java.io.FileInputStream.<init>(FileInputStream.java:93)
at com.zimbra.common.net.DefaultTrustManager.<init>(DefaultTrustManager.java:47)
... 23 more
[] ERROR: defaulting to com.zimbra.cs.account.ldap.LdapProvisioning
Exception in thread "main" java.lang.NullPointerException
at com.zimbra.cs.ldap.unboundid.UBIDLdapOperation$GetConnection.execute(UBIDLdapOperation.java:189)
at com.zimbra.cs.ldap.unboundid.UBIDLdapContext.getConnection(UBIDLdapContext.java:200)
at com.zimbra.cs.ldap.unboundid.UBIDLdapContext.<init>(UBIDLdapContext.java:169)
at com.zimbra.cs.ldap.unboundid.UBIDLdapClient.getContextImpl(UBIDLdapClient.java:90)
at com.zimbra.cs.ldap.LdapClient.getContext(LdapClient.java:135)
at com.zimbra.cs.account.ldap.ZLdapHelper.getAttributes(ZLdapHelper.java:276)
at com.zimbra.cs.account.ldap.LdapHelper.getAttributes(LdapHelper.java:201)
at com.zimbra.cs.account.ldap.LdapProvisioning.getServerByName(LdapProvisioning.java:4200)
at com.zimbra.cs.account.ldap.LdapProvisioning.getServerByNameInternal(LdapProvisioning.java:4188)
at com.zimbra.cs.account.ldap.LdapProvisioning.get(LdapProvisioning.java:4166)
at com.zimbra.cs.account.ProvUtil.lookupServer(ProvUtil.java:3566)
at com.zimbra.cs.account.ProvUtil.doGetServer(ProvUtil.java:4918)
at com.zimbra.cs.account.ProvUtil.execute(ProvUtil.java:1262)
at com.zimbra.cs.account.ProvUtil.main(ProvUtil.java:4137)
Setting defaults...done.
Setting defaults from existing config...done.
Checking for port conflicts
Setting defaults from ldap...done.
[] ERROR: could not instantiate Provisioning interface of class 'com.zimbra.cs.account.ldap.LdapProvisioning'; defaulting to LdapProvisioning
java.lang.IllegalStateException: Unable to create CustomTrustManager
at com.zimbra.common.net.TrustManagers.customTrustManager(TrustManagers.java:58)
at com.zimbra.cs.ldap.unboundid.LdapSSLUtil.getTrustManager(LdapSSLUtil.java:84)
at com.zimbra.cs.ldap.unboundid.LdapSSLUtil.createSSLContext(LdapSSLUtil.java:89)
at com.zimbra.cs.ldap.unboundid.LdapConnectionPool.createConnPool(LdapConnectionPool.java:106)
at com.zimbra.cs.ldap.unboundid.LdapConnectionPool.createConnectionPool(LdapConnectionPool.java:63)
at com.zimbra.cs.ldap.unboundid.UBIDLdapContext.init(UBIDLdapContext.java:106)
at com.zimbra.cs.ldap.unboundid.UBIDLdapClient.init(UBIDLdapClient.java:39)
at com.zimbra.cs.ldap.LdapClient.getInstanceIfLDAPavailable(LdapClient.java:62)
at com.zimbra.cs.ldap.LdapClient.getInstance(LdapClient.java:69)
at com.zimbra.cs.ldap.LdapClient.initialize(LdapClient.java:94)
at com.zimbra.cs.account.ldap.LdapProv.<init>(LdapProv.java:47)
at com.zimbra.cs.account.ldap.LdapProvisioning.<init>(LdapProvisioning.java:291)
at com.zimbra.cs.account.ldap.LdapProvisioning.<init>(LdapProvisioning.java:288)
at sun.reflect.NativeConstructorAccessorImpl.newInstance0(Native Method)
at sun.reflect.NativeConstructorAccessorImpl.newInstance(NativeConstructorAccessorImpl.java:62)
at sun.reflect.DelegatingConstructorAccessorImpl.newInstance(DelegatingConstructorAccessorImpl.java:45)
at java.lang.reflect.Constructor.newInstance(Constructor.java:423)
at java.lang.Class.newInstance(Class.java:442)
at com.zimbra.cs.account.Provisioning.getInstance(Provisioning.java:354)
at com.zimbra.cs.account.Provisioning.getInstance(Provisioning.java:310)
at com.zimbra.cs.account.ProvUtil.initProvisioning(ProvUtil.java:1030)
at com.zimbra.cs.account.ProvUtil.main(ProvUtil.java:4133)
Caused by: java.security.KeyStoreException: java.io.FileNotFoundException: /opt/zimbra/common/lib/jvm/java/lib/security/cacerts (No such file or directory)
at com.zimbra.common.net.DefaultTrustManager.<init>(DefaultTrustManager.java:54)
at com.zimbra.common.net.CustomTrustManager.<init>(CustomTrustManager.java:64)
at com.zimbra.common.net.TrustManagers.customTrustManager(TrustManagers.java:56)
... 21 more
Caused by: java.io.FileNotFoundException: /opt/zimbra/common/lib/jvm/java/lib/security/cacerts (No such file or directory)
at java.io.FileInputStream.open0(Native Method)
at java.io.FileInputStream.open(FileInputStream.java:195)
at java.io.FileInputStream.<init>(FileInputStream.java:138)
at java.io.FileInputStream.<init>(FileInputStream.java:93)
at com.zimbra.common.net.DefaultTrustManager.<init>(DefaultTrustManager.java:47)
... 23 more
[] ERROR: defaulting to com.zimbra.cs.account.ldap.LdapProvisioning
Exception in thread "main" java.lang.NullPointerException
at com.zimbra.cs.ldap.unboundid.UBIDLdapOperation$GetConnection.execute(UBIDLdapOperation.java:189)
at com.zimbra.cs.ldap.unboundid.UBIDLdapContext.getConnection(UBIDLdapContext.java:200)
at com.zimbra.cs.ldap.unboundid.UBIDLdapContext.<init>(UBIDLdapContext.java:169)
at com.zimbra.cs.ldap.unboundid.UBIDLdapClient.getContextImpl(UBIDLdapClient.java:90)
at com.zimbra.cs.ldap.LdapClient.getContext(LdapClient.java:135)
at com.zimbra.cs.account.ldap.ZLdapHelper.getAttributes(ZLdapHelper.java:276)
at com.zimbra.cs.account.ldap.LdapHelper.getAttributes(LdapHelper.java:201)
at com.zimbra.cs.account.ldap.LdapProvisioning.getServerByName(LdapProvisioning.java:4200)
at com.zimbra.cs.account.ldap.LdapProvisioning.getServerByNameInternal(LdapProvisioning.java:4188)
at com.zimbra.cs.account.ldap.LdapProvisioning.get(LdapProvisioning.java:4166)
at com.zimbra.cs.account.ProvUtil.lookupServer(ProvUtil.java:3566)
at com.zimbra.cs.account.ProvUtil.doGetServer(ProvUtil.java:4918)
at com.zimbra.cs.account.ProvUtil.execute(ProvUtil.java:1262)
at com.zimbra.cs.account.ProvUtil.main(ProvUtil.java:4137)
Main menu
1) Common Configuration:
+Hostname: mail.my_domain.toto
+Ldap master host: mail.my_domain.toto
+Ldap port: 389
+Ldap Admin password: set
+Store ephemeral attributes outside Ldap: no
+Secure interprocess communications: yes
******* +TimeZone: UNSET
+IP Mode: ipv4
+Default SSL digest: sha256
2) zimbra-ldap: Enabled
3) zimbra-logger: Enabled
4) zimbra-mta: Enabled
5) zimbra-dnscache: Enabled
6) zimbra-snmp: Enabled
7) zimbra-store: Enabled
+Create Admin User: no
+Anti-virus quarantine user: virus-quarantine.whuwkld2zo@mail.my_domain.toto
+Enable automated spam training: yes
+Spam training user: spam.1h3s89yl@mail.my_domain.toto
+Non-spam(Ham) training user: ham.ajdpgje51@mail.my_domain.toto
+SMTP host: mail.my_domain.toto
+Web server HTTP port: 8080
+Web server HTTPS port: 8443
+Web server mode: https
+IMAP server port: 7143
+IMAP server SSL port: 7993
+POP server port: 7110
+POP server SSL port: 7995
+Use spell check server: yes
+Spell server URL: http://mail.my_domain.toto:7780/aspell.php
******* +Enable version update checks: UNSET
+Install mailstore (service webapp): yes
+Install UI (zimbra,zimbraAdmin webapps): yes
8) zimbra-spell: Enabled
9) zimbra-proxy: Enabled
10) zimbra-imapd: Enabled
11) Default Class of Service Configuration:
******* +Enable Tasks Feature: UNSET
s) Save config to file
x) Expand menu
q) Quit
So I reinstalled the certficate trough :
Code: Select all
** Verifying '/tmp/commercial.crt' against '/opt/zimbra/ssl/zimbra/commercial/commercial.key'
Certificate '/tmp/commercial.crt' and private key '/opt/zimbra/ssl/zimbra/commercial/commercial.key' match.
** Verifying '/tmp/commercial.crt' against '/tmp/commercial_ca.crt'
Valid certificate chain: /tmp/commercial.crt: OK
** Verifying '/tmp/commercial.crt' against '/opt/zimbra/ssl/zimbra/commercial/commercial.key'
Certificate '/tmp/commercial.crt' and private key '/opt/zimbra/ssl/zimbra/commercial/commercial.key' match.
** Verifying '/tmp/commercial.crt' against '/tmp/commercial_ca.crt'
Valid certificate chain: /tmp/commercial.crt: OK
** Copying '/tmp/commercial.crt' to '/opt/zimbra/ssl/zimbra/commercial/commercial.crt'
** Copying '/tmp/commercial_ca.crt' to '/opt/zimbra/ssl/zimbra/commercial/commercial_ca.crt'
** Appending ca chain '/tmp/commercial_ca.crt' to '/opt/zimbra/ssl/zimbra/commercial/commercial.crt'
** Importing cert '/opt/zimbra/ssl/zimbra/commercial/commercial_ca.crt' as 'zcs-user-commercial_ca' into cacerts '/opt/zimbra/common/lib/jvm/java/jre/lib/security/cacerts'
** NOTE: restart mailboxd to use the imported certificate.
** Saving config key 'zimbraSSLCertificate' via zmprov modifyServer mail.my_domain.toto...ok
** Saving config key 'zimbraSSLPrivateKey' via zmprov modifyServer mail.my_domain.toto...ok
** Installing imapd certificate '/opt/zimbra/conf/imapd.crt' and key '/opt/zimbra/conf/imapd.key'
** Copying '/opt/zimbra/ssl/zimbra/commercial/commercial.crt' to '/opt/zimbra/conf/imapd.crt'
** Copying '/opt/zimbra/ssl/zimbra/commercial/commercial.key' to '/opt/zimbra/conf/imapd.key'
** Creating file '/opt/zimbra/ssl/zimbra/jetty.pkcs12'
** Creating keystore '/opt/zimbra/conf/imapd.keystore'
** Installing ldap certificate '/opt/zimbra/conf/slapd.crt' and key '/opt/zimbra/conf/slapd.key'
** Copying '/opt/zimbra/ssl/zimbra/commercial/commercial.crt' to '/opt/zimbra/conf/slapd.crt'
** Copying '/opt/zimbra/ssl/zimbra/commercial/commercial.key' to '/opt/zimbra/conf/slapd.key'
** Creating file '/opt/zimbra/ssl/zimbra/jetty.pkcs12'
** Creating keystore '/opt/zimbra/mailboxd/etc/keystore'
** Installing mta certificate '/opt/zimbra/conf/smtpd.crt' and key '/opt/zimbra/conf/smtpd.key'
** Copying '/opt/zimbra/ssl/zimbra/commercial/commercial.crt' to '/opt/zimbra/conf/smtpd.crt'
** Copying '/opt/zimbra/ssl/zimbra/commercial/commercial.key' to '/opt/zimbra/conf/smtpd.key'
** Installing proxy certificate '/opt/zimbra/conf/nginx.crt' and key '/opt/zimbra/conf/nginx.key'
** Copying '/opt/zimbra/ssl/zimbra/commercial/commercial.crt' to '/opt/zimbra/conf/nginx.crt'
** Copying '/opt/zimbra/ssl/zimbra/commercial/commercial.key' to '/opt/zimbra/conf/nginx.key'
** NOTE: restart services to use the new certificates.
** Cleaning up 9 files from '/opt/zimbra/conf/ca'
** Removing /opt/zimbra/conf/ca/commercial_ca_3.crt
** Removing /opt/zimbra/conf/ca/ca.pem
** Removing /opt/zimbra/conf/ca/commercial_ca_1.crt
** Removing /opt/zimbra/conf/ca/157753a5.0
** Removing /opt/zimbra/conf/ca/ca.key
** Removing /opt/zimbra/conf/ca/d6325660.0
** Removing /opt/zimbra/conf/ca/8d28ae65.0
** Removing /opt/zimbra/conf/ca/69559564.0
** Removing /opt/zimbra/conf/ca/commercial_ca_2.crt
** Copying CA to /opt/zimbra/conf/ca
** Copying '/opt/zimbra/ssl/zimbra/ca/ca.key' to '/opt/zimbra/conf/ca/ca.key'
** Copying '/opt/zimbra/ssl/zimbra/ca/ca.pem' to '/opt/zimbra/conf/ca/ca.pem'
** Creating CA hash symlink '69559564.0' -> 'ca.pem'
** Creating /opt/zimbra/conf/ca/commercial_ca_1.crt
** Creating CA hash symlink '8d28ae65.0' -> 'commercial_ca_1.crt'
** Creating /opt/zimbra/conf/ca/commercial_ca_2.crt
** Creating CA hash symlink 'd6325660.0' -> 'commercial_ca_2.crt'
** Creating /opt/zimbra/conf/ca/commercial_ca_3.crt
** Creating CA hash symlink '157753a5.0' -> 'commercial_ca_3.crt'
root@mail:~/Cert_2017_01_14# cd /opt/zimbra/common/lib/jvm/java/lib/
I restart Zimbra
root@mail:/opt/zimbra/common/lib/jvm/java/lib# cd /opt/zimbra/common/lib/jvm/java/jre/lib/security
root@mail:/opt/zimbra/common/lib/jvm/java/jre/lib/security# ls
blacklisted.certs cacerts java.policy java.security policy
I retried the same upgrade, same problem .....
Could you give me an advice to find a solution for my problem.
My zimbra version is 8.8.11_GA_3737 on an Ubuntu Server 16.04 with all the updates.
Code: Select all
root@mail:~# apt update
Atteint :1 http://fr.archive.ubuntu.com/ubuntu xenial InRelease
Atteint :2 http://fr.archive.ubuntu.com/ubuntu xenial-updates InRelease
Atteint :3 http://fr.archive.ubuntu.com/ubuntu xenial-backports InRelease
Atteint :4 https://repo.zimbra.com/apt/87 xenial InRelease
Atteint :5 http://security.ubuntu.com/ubuntu xenial-security InRelease
Lecture des listes de paquets... Fait
Construction de l'arbre des dépendances
Lecture des informations d'état... Fait
Tous les paquets sont à jour.
root@mail:~# apt upgrade
Lecture des listes de paquets... Fait
Construction de l'arbre des dépendances
Lecture des informations d'état... Fait
Calcul de la mise à jour... Fait
0 mis à jour, 0 nouvellement installés, 0 à enlever et 0 non mis à jour.