Zimbra Server cannot start

Posted: October 21, 2011 in Debian

My Zimbra wont start …

Check my zimbra server status i get this error:

zimbra@webmail:tail /var/log/zimbra.log 
 zmmtaconfig: Skipping All MTA Authentication Target URLs update. 
zmmtaconfig: Skipping getAllMtaAuthURLs ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.net.ssl.SSLHandshakeException sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed) 

It’s happen when your server certificate expired…. (i know when i google the problem)

The solutions is.

1. Create New Certificte Authority (CA)

root@webmail:~# /opt/zimbra/bin/zmcertmgr createca -new

2. Generate CA expired on 365 days

root@webmail:~# /opt/zimbra/bin/zmcertmgr createcrt -new -days 365

3. Deploy the certificate

root@webmail:~# /opt/zimbra/bin/zmcertmgr deploycrt self

4. Deploy the CA

root@webmail:~# /opt/zimbra/bin/zmcertmgr deployca

5. Verifications certificate

root@webmail:~# /opt/zimbra/bin/zmcertmgr viewdeployedcrt 


after all that issued this command in one line

root@webmail:~# /opt/zimbra/java/bin/keytool -import -alias root -keystore /opt/zimbra/java/jre/lib/security/cacerts -storepass changeit -file /opt/zimbra/conf/ca/ca.pem

On the questions Trust the certificate : Yes

After all have done than issued this command

root@webmail:~# su – zimbra

zimbra@webmail:~$ zmcontrol status

zimbra@webmail:~$ zmcontrol stop

zimbra@webmail:~$ zmcontrol start

Ok you ZCS server will run smooth.

  1. aan says:

    Mas ketika zmcontrol status muncul pesan :
    Unable to determine enabled services from ldap.
    Unable to determine enabled services. Cache is out of date or doesn’t exist.
    itu kenapa ya mas

    mohon bantuannya

  2. sanjay says:


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s