Using Zimbra 7.1.0_GA_3140. Ubuntu.
We have a working SSL Certificate installed. We want to replace it with a new certificate with an additional Subject Alternate Name.
I created a CSR using the Zimbra web administration console and submitted it for signing.
When I tried install the new certificate from the web UI, I received this error:
Your certificate was not installed due to the error: system failure: XXXXX ERROR: Unmatching certificate (/opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp/current.crt) and private key (/opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp/current_com.key) pair.
Zimbra support directed me to use the CLI steps documented here:
The paths in some of the steps do not exist on our server, for example:
I tried the steps anyway, and received the below error on Step 6 of Single Node Commercial Certificate:
XXXXX ERROR: Can't find private key /opt/zimbra/ssl/zimbra/commerical/commerical.key
The above makes sense because the path doesn't exist.