Zimbra commercial certificate verification faile

[kirtan patel]

Hello Experts,

I have zimbra network edition mail server. i have new commercial ssl certificate.

As per this documents i m installing ssl certificate in my mail server but  here verification failed..

"http://www.zimbra.com/forums/administrators/59700-multi-domain-ssl-certs-zcs-8-0-1-a.html"

I getting this error. 

 /opt/zimbra/bin/zmcertmgr verifycrt comm server.key mail.mydomain.com.crt

** Verifying mail.mydomain.com.crt against server.key

Certificate (mail.mydomain.com.crt) and private key (server.key) match.

XXXXX ERROR: Invalid Certificate: mail.mydomain.com crt: OU = Domain Control Validated, OU = Free SSL, CN = mail.mydomain.com

error 20 at 0 depth lookup:unable to get local issuer certificate

----------------------------------------------------------------------------------------------------------------------------

 /opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key mail.mydomain.com.crt

** Verifying mail.mydomain.com.crt against /opt/zimbra/ssl/zimbra/commercial/commercial.key

XXXXX ERROR: Unmatching certificate (mail.mydomain.com.crt) and private key (/opt/zimbra/ssl/zimbra/commercial/commercial.key) pair.

Please guide me how to resolve this issue..

Thanks & Regards

Kirtan Patel

[Tejas Barot]

Hello,

It is clearly saying unmatching pair.

Please confirm you certificates are correct one.

--
Thanks & Regards,
Tejas Barot
Linux Administrator,
Red Hat Certified Engineer,
Linux Blog:- http://www.tejasbarot.com
Linux Forums :- http://linuxforums.tejasbarot.com
Open Source :- http://opensource.tejasbarot.com
Facebook :- http://www.fb.me/tejasbarot.official
Facebook Page :- http://www.fb.me/AllLinuxUsersBlog
Twitter :- https://twitter.com/imtejasbarot
LinkedIn :- http://in.linkedin.com/in/imtejasbarot

Sent on my BlackBerry® from Vodafone

---

From: kirtan patel <kirt...@gmail.com>

Sender: vg...@googlegroups.com

Date: Fri, 26 Apr 2013 11:45:02 +0530

To: <vg...@googlegroups.com>

ReplyTo: vg...@googlegroups.com

Subject: [VGLUG] Zimbra commercial certificate verification faile

--
Please read http://www.catb.org/~esr/faqs/smart-questions.html before posting.
You received this message because you are subscribed to the "Vibrant GNU/Linux User Group".
To stop receiving emails from this group, mail to VGLUG+un...@googlegroups.com
To post to this group, send email to VG...@googlegroups.com
For more options, visit this group at http://groups.google.com/group/VGLUG
 
---
You received this message because you are subscribed to the Google Groups "VGLUG" group.
To unsubscribe from this group and stop receiving emails from it, send an email to vglug+un...@googlegroups.com.
For more options, visit https://groups.google.com/groups/opt_out.
 
 

[kirtan patel]

Hi Tejas Bhai,,

Thanks for reply..

Here i am first generating ssl.csr and ssl.key and then use same ssl.csr give to CA certificate Authority.

then CA give me ssl.crt file..  

and then i use same ssl.key. and ssl.crt for verification and i m getting output this error. 

please if you have any other way to verify crt  or ssl installation procedure for zimbra mail server then plz give me....

Thanks & Regards

Kirtan Patel

[Tejas Barot]

Hello,

Have you tried with Graphical Console... Its much easy.. It gives you boxes what you require at Certificate installation time.

Make sure you provide all required information in Graphical console else it'll stop working.

Hope this helps you.

--
Thanks & Regards,
Tejas Barot
Linux Administrator,
Red Hat Certified Engineer,
Linux Blog:- http://www.tejasbarot.com
Linux Forums :- http://linuxforums.tejasbarot.com
Open Source :- http://opensource.tejasbarot.com
Facebook :- http://www.fb.me/tejasbarot.official
Facebook Page :- http://www.fb.me/AllLinuxUsersBlog
Twitter :- https://twitter.com/imtejasbarot
LinkedIn :- http://in.linkedin.com/in/imtejasbarot

Sent on my BlackBerry® from Vodafone

---

From: kirtan patel <kirt...@gmail.com>

Sender: vg...@googlegroups.com

Date: Fri, 26 Apr 2013 23:16:40 +0530

To: <vg...@googlegroups.com>

ReplyTo: vg...@googlegroups.com

Subject: Re: [VGLUG] Zimbra commercial certificate verification faile

[kirtan patel]

Tejas Bhai,

In zimbra ssl certificate must be verified.

if without verification i try to install ssl by console its showing error ssl is not verified.

and for ssl verification i m using zmcertmgr  its zimbra tool its gives error..

stuck here..

Thanks & Regards

Kirtan Patel 

[Deep Patel]

On Friday, April 26, 2013, kirtan patel wrote:

Dear Kirtan,

Hi Tejas Bhai,,

Thanks for reply..

Here i am first generating ssl.csr and ssl.key and then use same ssl.csr give to CA certificate Authority.

then CA give me ssl.crt file..  

 Have you send your .csr file to a commercial CA. Like verisign?

and then i use same ssl.key. and ssl.crt for verification and i m getting output this error. 

 

Are the fields in your .csr same as the CA?

 

please if you have any other way to verify crt  or ssl installation procedure for zimbra mail server then plz give me....

Thanks & Regards

Kirtan Patel

Let me know 

Warm regards  

--
Deep Patel ( RHC{X,E,SS,VA}, CE|H, CCNA )
CodeLogic
C/3 Sandeep Appartments
Above New Alka Restaurant,
R.C.Dutt Road,
Alakapuri Vadodara 390007
Website: www.codelogic.co.in
M: +91 9601009898
Free Open Source Knowledge Share: http://www.fossks.org

CodeLogic,
910, J.B.Tower, Opp T.V.Tower,
Drive In Road, Thaltej, Ahmedabad
www.codelogic.co.in
Email: in...@codelogic.co.in
M: +91 9601009898

"The most of ugliness that i saw in others was but a reflection of my own"

[kirtan patel]

 

Hi Friends,

 

I m getting this error previous error I resolved..

 

Please help me for resolve this error because I trying many time but same issue..

 

[root@demo commercial]# /opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key commercial.crt commercial_ca.crt
** Verifying commercial.crt against /opt/zimbra/ssl/zimbra/commercial/commercial.key
Certificate (commercial.crt) and private key (/opt/zimbra/ssl/zimbra/commercial/commercial.key) match.
XXXXX ERROR: Invalid Certificate: commercial.crt: OU = Domain Control Validated, OU = Free SSL, CN = demo.mymail.in

error 20 at 0 depth lookup:unable to get local issuer certificate

[kirtan patel]

Hi Friends,

Finally i have done.. Commercial certificate for zimbra.. Now its easy. you can try by the help of this link..

http://wiki.zimbra.com/wiki/Administration_Console_and_CLI_Certificate_Tools

Now I want to implement DKIM for the same zimbra if any body have any documentation plz send me..

Thanks Tejas & Deep bhai..

Thanks & Regards

Kirtan Patel