Is this the way to fix the LDAP

[zim_mike]

Hi,

My 8.8.16 zimbra suffered this a few times now and was usually able to get services started again.

>Unable to start TLS: SSL connect attempt failed error:1416F086:SSL routines:tls_process_server_certificate:certificate verify failed when connecting to ldap master.

This time, I wasn't able to but I found this on the net.
https://stackoverflow.com/questions/553 ... or14090086

zimbra not starting

zmlocalconfig -e ldap_starttls_required=false
zmlocalconfig -e ldap_starttls_supported=0
zmcontrol restart

This worked but I'm never sure about turning off security stuff so wanted to ask here.

I think it's related to the self signed cert, I can't remember now but when I tried installing it, it just broke things left and right so had to hurry back to a backup.

Is it ok to have run the above commands to solve the problem for now? It's not a highly public server, meaning, it's mainly for internal use only.

[jhurley]

The error is reporting an issue with the cert and could be related to the self-sign cert.
As you did, disabling TLS for the ldap will resolve the startup of the LDAP.
But it's not recommended using a self-sign cert on a production system.

[zim_mike]

You confirm that it's the SSL cert that is the problem at least which is good to know. I wasn't sure what the cause might be.

Thank you very much.