Zimbra 8.6 erro when run /opt/zimbra/bin/zmcertmgr verifycrt comm

Help
1

root@mail:/opt/zimbra/ssl/letsencrypt# /opt/zimbra/bin/zmcertmgr verifycrt comm /opt/zimbra/ssl/zimbra/commercial/commercial.key cert.pem chain.pem
** Verifying cert.pem against /opt/zimbra/ssl/zimbra/commercial/commercial.key
Certificate (cert.pem) and private key (/opt/zimbra/ssl/zimbra/commercial/commercial.key) match.
XXXXX ERROR: Invalid Certificate: cert.pem: C = US, O = Let's Encrypt, CN = R3
error 2 at 1 depth lookup:unable to get issuer certificate
~# certbot --version
certbot 1.21.0

2

Is your zimbra-openjdk-cacerts package up to date? It was only recently updated to include ISRG Root X1.

1 Like
3

I was able to solve this problem by applying the following command on the cerboot server

certbot certonly -d *.mydomnine --preferred-chain="ISRG Root X1" --manual  --preferred-challenges dns-01 --force-renewal --manual-public-ip-logging-ok
4

English version (straight from Zimbra.com):
Installing a LetsEncrypt SSL Certificate - Zimbra :: Tech Center

1 Like
5

@ghen In your post, you should include the "how to":

1 Like
6

This topic was automatically closed 30 days after the last reply. New replies are no longer allowed.