Zimbra: 9.0.0.ZEXTRAS.202007114.UBUNTU18.64 UBUNTU18_64 FOSS edition, Patch 9.0.0_P14
Yet another variation on this error:
Code: Select all
zimbra@foomail:~$ zmprov gcf zimbraMailTrustedIP
ERROR: zclient.IO_ERROR (invoke PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target, server: localhost) (cause: javax.net.ssl.SSLHandshakeException PKIX path building failed: sun.security.provider.certpath.SunCertPathBuilderException: unable to find valid certification path to requested target)
The present cert is good, installed correctly, and all other aspects of Zimbra work nominally with the single exception of the cli tools.
Code: Select all
zimbra@foomail:~$ /opt/zimbra/bin/zmcertmgr viewdeployedcrt
- imapd: /opt/zimbra/conf/imapd.crt
notBefore=Apr 11 15:29:56 2022 GMT
notAfter=Jul 10 15:29:55 2022 GMT
subject=CN = *.foo.bar
issuer=C = US, O = Let's Encrypt, CN = R3
Code: Select all
zimbra@foomail:~$ /opt/zimbra/common/bin/keytool -import -alias LE_fullchain -keystore /opt/zimbra/common/etc/java/cacerts -file /etc/letsencrypt/live/foo.bar/fullchain.pem
Any thoughts are welcome.
Chris