Results 1 to 7 of 7

Thread: CA Cert

  1. #1
    Join Date
    Jan 2008
    Location
    Switzerland
    Posts
    46
    Rep Power
    7

    Question CA Cert

    Hello,

    I don't understand what I am doing wrong... I want to install a CA Certificate (root certificate) but somehow can't get it done. I have the Server 5.0.6 and use the tool that you guys provide with Zimbra. I use the file that Zimbra makes and then make a key on cacert.org, so far everything works fine then i save what cacert.org made (the key) to a seperate file. I have tried .crt .pem. Both eventually don't work. And I also took the root certificate from cacert.org. Also all variants there are. Always gave me an error. What are the steps I need to follow? I feel so dumb not being able to achieve this with a tool...

  2. #2
    Join Date
    Jan 2008
    Location
    Switzerland
    Posts
    46
    Rep Power
    7

    Default

    Is there nobody that can give me a little tutorial on this :X

  3. #3
    Join Date
    Nov 2007
    Location
    Berkeley, CA
    Posts
    115
    Rep Power
    8

    Default Same/Similar issue here

    I posted my specific problem in this thread:

    http://www.zimbra.com/forums/install...ty-pkcs12.html

    ... but I think that overall this seems to be an issue. I don't think the documentation of this is terribly clear. Of course, it could just be me not getting it, but I see a lot of people here in forums asking very similar questions and having issues. If someone from Zimbra could help a little bit on this particular issue, I think a lot of us would appreciate it a lot. At least I know I would.

    Thanks in advance.

  4. #4
    Join Date
    Jan 2008
    Location
    Switzerland
    Posts
    46
    Rep Power
    7

    Default

    I agree on the not so clear documentation. I always try to figure out things on my own, but here I just had no luck finding the documentation I need The one I read just leaves too many questions for noobs like me Overall I do understand it... and also how certificates work (also made them before).

  5. #5
    Join Date
    Nov 2007
    Location
    Berkeley, CA
    Posts
    115
    Rep Power
    8

    Default Solved

    I'm marking this solved from my end.

    Here's what I did:


    • Used the Zimbra certificate wizard to "Generate the CSR for the commercial certificate authorizer."

    • Purchased a certificate from GeoTrust using the CSR.

    • Downloaded one of GeoTrust's root certificates in .cer format from their website.

    • Once I had my .crt and the root .cer, I went back to the Zimbra certificate wizard and did the following:


    • Selected the server name for which I wanted to install the certificate. (Originally I selected "--- All Servers ---" here. I think that is what caused the problem. Once I selected just one of the servers in the list, it worked fine.)

    • At the Root / Root CA / Intermediate CA screen I browsed for my certificate (.crt) and the root CA (.cer) AND removed the Intermediate CA, as I didn't need that, clicked next ...

    • Waited a little ... and the wizard told me it had been successfully installed.

    • Rebooted the server (like the wizard told me to) ... and it now works just fine.


    Hope this helps someone else.

  6. #6
    Join Date
    Dec 2005
    Posts
    94
    Rep Power
    10

    Default

    Quote Originally Posted by mlanner View Post
    I'm marking this solved from my end.

    Here's what I did:


    • Used the Zimbra certificate wizard to "Generate the CSR for the commercial certificate authorizer."

    • Purchased a certificate from GeoTrust using the CSR.

    • Downloaded one of GeoTrust's root certificates in .cer format from their website.

    • Once I had my .crt and the root .cer, I went back to the Zimbra certificate wizard and did the following:


    • Selected the server name for which I wanted to install the certificate. (Originally I selected "--- All Servers ---" here. I think that is what caused the problem. Once I selected just one of the servers in the list, it worked fine.)

    • At the Root / Root CA / Intermediate CA screen I browsed for my certificate (.crt) and the root CA (.cer) AND removed the Intermediate CA, as I didn't need that, clicked next ...

    • Waited a little ... and the wizard told me it had been successfully installed.

    • Rebooted the server (like the wizard told me to) ... and it now works just fine.


    Hope this helps someone else.
    Which root cert did you use? I also have a cert from GeoTrust and due to a upgrade error had it reissued. Now I get a Invalid Certificate Chain message when installing it. I previously used Equifax_Secure_Certificate_Authority.cer, but none of the eight root certs from GeoTrust get me past the error.

  7. #7
    Join Date
    Nov 2007
    Location
    Berkeley, CA
    Posts
    115
    Rep Power
    8

    Default

    I think I just used root cert number one. I can't remember 100%, but I'm fairly certain that's what I used.

Similar Threads

  1. Upgrade Self Signed Cert to Commercial Cert (godaddy)
    By lareck in forum Administrators
    Replies: 1
    Last Post: 01-04-2010, 02:51 AM
  2. Failed Commercial Cert Migration
    By solarsail in forum Administrators
    Replies: 10
    Last Post: 04-23-2009, 02:03 AM
  3. [SOLVED] Tomcat ignoring new SSL cert?
    By gkra in forum Administrators
    Replies: 1
    Last Post: 09-07-2007, 11:44 AM
  4. Replies: 2
    Last Post: 03-25-2007, 10:40 PM

Posting Permissions

  • You may not post new threads
  • You may not post replies
  • You may not post attachments
  • You may not edit your posts
  •