Unable to start TLS, certificate verify failed when connecting to ldap master

[mtk]

Hi,

using 8.8.15.GA.3829.UBUNTU14.64 UBUNTU14_64 FOSS edition, Patch 8.8.15_P1., my self-signed SSL expired.
I created a new one according to https://wiki.zimbra.com/wiki/Regenerate_Self-Signed_SSL_Certificate_-_Single-Server which went perfectly fine according to the described steps.

However when starting services via zmcontrol start:

Code: Select all

Unable to start TLS: SSL connect attempt failed error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed when connecting to ldap master.

I am lost... anyone having an idea what's wrong here? Thank you!

Kind regards

[mtk]

Update: Found this guide https://tweenpath.net/fix-unable-start-tls-ssl-connect-attempt-failed-error14090086ssl-routinesssl3_get_server_certificatecertificate-verify-failed-connecting-ldap-master-cannot-determine-services-exiting/ and issued

Code: Select all

zmlocalconfig -e ldap_starttls_required=false
zmlocalconfig -e ldap_starttls_supported=0

Which seems to have worked as a workaround... still I would like to know what went wrong there in case anyone knows... Thanks!