Hi Forum
I have 2 zimbra servers with their certificat is not renewing the certificates
I've googled aroung and did find some issues regarding the CA from letsencypt
I have installed certbot from Snap on Ubuntu18,04 - and I can create my certificates with snap -. but that where its stopping - and cannot make it work along with Zimbra
But when verifying the certificates I'm getting this error :
zimbra@zimbra:~/ssl/letsencrypt$ /opt/zimbra/bin/zmcertmgr verifycrt comm privkey.pem cert.pem fullchain.pem
** Verifying 'cert.pem' against 'privkey.pem'
Certificate 'cert.pem' and private key 'privkey.pem' match.
** Verifying 'cert.pem' against 'fullchain.pem'
ERROR: Unable to validate certificate chain: C = US, O = Internet Security Research Group, CN = ISRG Root X1
error 2 at 2 depth lookup: unable to get issuer certificate
error cert.pem: verification failed
zimbra@zimbra:~/ssl/letsencrypt$ /opt/zimbra/bin/zmcertmgr verifycrt comm privkey.pem cert.pem chain.pem
** Verifying 'cert.pem' against 'privkey.pem'
Certificate 'cert.pem' and private key 'privkey.pem' match.
** Verifying 'cert.pem' against 'chain.pem'
ERROR: Unable to validate certificate chain: C = US, O = Internet Security Research Group, CN = ISRG Root X1
error 2 at 2 depth lookup: unable to get issuer certificate
error cert.pem: verification failed
And cannot find the right way to get the certificates rigth and deploy them.
My actually certificate runs until January - but I think the Root Certificate is the issue here
Can anyone helt me here - with getting the right setup so I can deploy my certificate again
THanks In advance
