certificate-Issue on old zimbra installation: error 2 at 1 depth lookup:unable to get issuer certificate

[zimbraxtc]

Hello!

I have a old Zimbra-server (8.6.0) running on an old ubuntu (14.04) server.

Yes I should update to newer version, but you know how it is...

I use Letsencrypt and getssl for https and it has been working without problem since 2021. I normally renew the cert on 60-days basis and yesterday it was that happy moment again. I generated new files as normal and run:

Code: Select all

sudo /opt/zimbra/bin/zmcertmgr verifycrt comm domainname.com.key domianname.com.crt fullchain.crt

Which normally says:

Code: Select all

** Verifying domainname.com.crt against domainname.com.key
Certificate (domainname.com.crt) and private key (domainname.com.key) match.
Valid Certificate: domainname.com.crt: OK

But now I get the error:

Code: Select all

** Verifying domainname.com.crt against domainname.com.key
Certificate (domainname.com.crt) and private key (domainname.com.key) match.
XXXXX ERROR: Invalid Certificate: domainname.com.crt: C = US, O = Let's Encrypt, CN = R10
error 2 at 1 depth lookup:unable to get issuer certificate

I guess something is wrong in the certificate-chain here.

My current certificate was generated in August and the thing is that if i run the command above on that files I get the same error. But in august I did not get the error so I think there is some issue with my installation rater than a issue with the certificate.

As a note the server was installed just a little more than ten years ago.

Any hints on how to start the troubleshooting?

Thanks a lot in advance!

[zimbraxtc]

Solved by appendning: https://letsencrypt.org/certs/isrgrootx1.pem to file fullchain.crt