ERROR: com.zimbra.cert.MyPKCS12Import

Ask questions about your setup or get help installing ZCS server (ZD section below).
Post Reply
MyM
Posts: 2
Joined: Fri Dec 23, 2022 12:37 pm

ERROR: com.zimbra.cert.MyPKCS12Import

Post by MyM »

Hello guys,

hope everything is going good today.

I'm trying to renew our SSL Certificate in our Zimbra Single-Server ( Release 8.8.15.GA.3869.UBUNTU18.64 UBUNTU18_64 FOSS edition, Patch 8.8.15_P36 ).
Unfortunately the installation is failing due to the following error:

zimbra@mail:~$ /opt/zimbra/bin/zmcertmgr deploycrt comm /var/tmp/cert/server.crt /var/tmp/cert/ca_bundle.crt
** Verifying '/var/tmp/cert/server.crt' against '/opt/zimbra/ssl/zimbra/commercial/commercial.key'
Certificate '/var/tmp/cert/server.crt' and private key '/opt/zimbra/ssl/zimbra/commercial/commercial.key' match.
** Verifying '/var/tmp/cert/server.crt' against '/var/tmp/cert/ca_bundle.crt'
Valid certificate chain: /var/tmp/cert/server.crt: OK
** Copying '/var/tmp/cert/server.crt' to '/opt/zimbra/ssl/zimbra/commercial/commercial.crt'
** Copying '/var/tmp/cert/ca_bundle.crt' to '/opt/zimbra/ssl/zimbra/commercial/commercial_ca.crt'
** Appending ca chain '/var/tmp/cert/ca_bundle.crt' to '/opt/zimbra/ssl/zimbra/commercial/commercial.crt'
** Importing cert '/opt/zimbra/ssl/zimbra/commercial/commercial_ca.crt' as 'zcs-user-commercial_ca' into cacerts '/opt/zimbra/common/lib/jvm/java/lib/security/cacerts'
** NOTE: restart mailboxd to use the imported certificate.
** Saving config key 'zimbraSSLCertificate' via zmprov modifyServer mail.mydomain.com...ok
** Saving config key 'zimbraSSLPrivateKey' via zmprov modifyServer mail.mydomain.com...ok
** Installing imapd certificate '/opt/zimbra/conf/imapd.crt' and key '/opt/zimbra/conf/imapd.key'
** Copying '/opt/zimbra/ssl/zimbra/commercial/commercial.crt' to '/opt/zimbra/conf/imapd.crt'
** Copying '/opt/zimbra/ssl/zimbra/commercial/commercial.key' to '/opt/zimbra/conf/imapd.key'
** Creating file '/opt/zimbra/ssl/zimbra/jetty.pkcs12'
** Creating keystore '/opt/zimbra/conf/imapd.keystore'
ERROR: com.zimbra.cert.MyPKCS12Import to '/opt/zimbra/ssl/zimbra/jetty.pkcs12' returned non-zero(1):
Error: Could not find or load main class com.zimbra.cert.MyPKCS12Import
Caused by: java.lang.ClassNotFoundException: com.zimbra.cert.MyPKCS12Import


This is what I tried so far:
- Run the certificate installation command with zimbra services on and with zimbra services off (except for ldap, it seems to be always required).
- Verified the chain with commands "/opt/zimbra/bin/zmcertmgr verifycrtchain /var/tmp/cert/ca_bundle.crt /var/tmp/cert/server.crt" and with commands "/opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial.key /var/tmp/cert/server.crt /var/tmp/cert/ca_bundle.cr"
- Run "chown -R zimbra:zimbra /opt/zimbra" and "/opt/zimbra/libexec/zmfixperms".

Do you have any suggestion?

Thank you a lot in advance.

Best regards,
Michael
MyM
Posts: 2
Joined: Fri Dec 23, 2022 12:37 pm

Re: ERROR: com.zimbra.cert.MyPKCS12Import

Post by MyM »

Hello guys,

any idea? :(

Thank you!
Post Reply