generate correctly a self signed certificate Zimbra

Posted by rkmax on Server Fault See other posts from Server Fault or by rkmax
Published on 2012-11-29T16:22:30Z Indexed on 2012/11/29 17:06 UTC
Read the original article Hit count: 440

I have a Single mail server with Zimbra 8.0.0 for generate certificate I'm following

  1. Generate the cert.

    ORG=MyOrganization
    CN=mail.mydomain.com
    COUNTRY=myCountry
    CITY=myCity
    
    /opt/zimbra/bin/zmcertmgr createcrt -new -days 365 -subject "/C=$COUNTRY/ST=N/A/L=$CITY/O=$ORG/OU=ZCS/CN=$CN"    
    /opt/zimbra/bin/zmcertmgr deploycrt self -allserver
    su - zimbra "zmcontrol restart"
    
  2. Veririficate with /opt/zimbra/bin/zmcertmgr viewdeployedcrt. i can see the new cert

  3. In Chrome go to https://mail.mydomain.com and export the .cer test in a Windows client

    certutil.exe -addstore root \path\to\exported.cert
    root "Root Certification Authorities trusted"
    You can add a root certificate to the root store
    CertUtil:-addstore command error: 0x8007000d (WIN32: 13)
    CertUtil: Invalid data.
    

even from chrome i've tried to add the cert without successful results.

can anyone help me with this problem?

© Server Fault or respective owner

Related posts about ssl-certificate

Related posts about zimbra