certificate removed
Posted: Wed Sep 19, 2018 5:30 pm
Hello, by mistake it seems to delete the certificates that zimbra installs when the installation is done for the first time, I am trying to generate again and I have this message
[zimbra@mail ~]$ /opt/zimbra/bin/zmcertmgr createcrt -new -days 365
** Creating directory '/opt/zimbra/ssl/zimbra'
** Creating directory '/opt/zimbra/ssl/zimbra/ca'
** Creating directory '/opt/zimbra/ssl/zimbra/commercial'
** Creating directory '/opt/zimbra/ssl/zimbra/server'
** Creating directory '/opt/zimbra/ssl/zimbra/ca/newcerts'
** Touching file '/opt/zimbra/ssl/.rnd'
** Touching file '/opt/zimbra/ssl/zimbra/ca/index.txt'
** Recreating /opt/zimbra/conf/zmssl.cnf
** Generating a server CSR of type 'self' for download
** Creating /opt/zimbra/ssl/zimbra/ca/zmssl.cnf
** Retrieving CA cert from LDAP... failed
** Retrieving CA private key from LDAP... failed
** Retrieving Commercial CA cert from LDAP... failed
ERROR: createca: empty key '/opt/zimbra/ssl/zimbra/ca/ca.key'
** Recreating /opt/zimbra/conf/zmssl.cnf
** Creating server cert request /opt/zimbra/ssl/zimbra/server/server.csr with keysize=2048 digest=sha256
** Saving config key 'zimbraSSLPrivateKey' via zmprov modifyServer mail.server.com...failed (rc=1)
** Signing cert request /opt/zimbra/ssl/zimbra/server/server.csr
ERROR: openssl ca failed(1):
Using configuration from /opt/zimbra/conf/zmssl.cnf
Error opening CA private key /opt/zimbra/ssl/zimbra/ca/ca.key
140553627977392:error:02001002:system library:fopen:No such file or directory:bss_file.c:406:fopen('/opt/zimbra/ssl/zimbra/ca/ca.key','r')
140553627977392:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:408:
unable to load CA private key
You have new mail in /var/spool/mail/zimbra
Thanks for you help
[zimbra@mail ~]$ /opt/zimbra/bin/zmcertmgr createcrt -new -days 365
** Creating directory '/opt/zimbra/ssl/zimbra'
** Creating directory '/opt/zimbra/ssl/zimbra/ca'
** Creating directory '/opt/zimbra/ssl/zimbra/commercial'
** Creating directory '/opt/zimbra/ssl/zimbra/server'
** Creating directory '/opt/zimbra/ssl/zimbra/ca/newcerts'
** Touching file '/opt/zimbra/ssl/.rnd'
** Touching file '/opt/zimbra/ssl/zimbra/ca/index.txt'
** Recreating /opt/zimbra/conf/zmssl.cnf
** Generating a server CSR of type 'self' for download
** Creating /opt/zimbra/ssl/zimbra/ca/zmssl.cnf
** Retrieving CA cert from LDAP... failed
** Retrieving CA private key from LDAP... failed
** Retrieving Commercial CA cert from LDAP... failed
ERROR: createca: empty key '/opt/zimbra/ssl/zimbra/ca/ca.key'
** Recreating /opt/zimbra/conf/zmssl.cnf
** Creating server cert request /opt/zimbra/ssl/zimbra/server/server.csr with keysize=2048 digest=sha256
** Saving config key 'zimbraSSLPrivateKey' via zmprov modifyServer mail.server.com...failed (rc=1)
** Signing cert request /opt/zimbra/ssl/zimbra/server/server.csr
ERROR: openssl ca failed(1):
Using configuration from /opt/zimbra/conf/zmssl.cnf
Error opening CA private key /opt/zimbra/ssl/zimbra/ca/ca.key
140553627977392:error:02001002:system library:fopen:No such file or directory:bss_file.c:406:fopen('/opt/zimbra/ssl/zimbra/ca/ca.key','r')
140553627977392:error:20074002:BIO routines:FILE_CTRL:system lib:bss_file.c:408:
unable to load CA private key
You have new mail in /var/spool/mail/zimbra
Thanks for you help