Archive for October 21, 2011

Zimbra Server cannot start

Posted: October 21, 2011 in Debian
2

My Zimbra wont start …

Check my zimbra server status i get this error:

zimbra@webmail:tail /var/log/zimbra.log 
 zmmtaconfig: Skipping All MTA Authentication Target URLs update. 
zmmtaconfig: Skipping getAllMtaAuthURLs ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.net.ssl.SSLHandshakeException sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed) 

It’s happen when your server certificate expired…. (i know when i google the problem)

The solutions is.

1. Create New Certificte Authority (CA)

root@webmail:~# /opt/zimbra/bin/zmcertmgr createca -new

2. Generate CA expired on 365 days

root@webmail:~# /opt/zimbra/bin/zmcertmgr createcrt -new -days 365

3. Deploy the certificate

root@webmail:~# /opt/zimbra/bin/zmcertmgr deploycrt self

4. Deploy the CA

root@webmail:~# /opt/zimbra/bin/zmcertmgr deployca

5. Verifications certificate

root@webmail:~# /opt/zimbra/bin/zmcertmgr viewdeployedcrt 

 

after all that issued this command in one line

root@webmail:~# /opt/zimbra/java/bin/keytool -import -alias root -keystore /opt/zimbra/java/jre/lib/security/cacerts -storepass changeit -file /opt/zimbra/conf/ca/ca.pem

On the questions Trust the certificate : Yes

After all have done than issued this command

root@webmail:~# su – zimbra

zimbra@webmail:~$ zmcontrol status

zimbra@webmail:~$ zmcontrol stop

zimbra@webmail:~$ zmcontrol start

Ok you ZCS server will run smooth.