Mailbox failure due to Certificate expiry

Mailbox failure due to Certificate expiry

Diagnosed By

su - zimbra -c "zmcontrol status"

This will show

mailboxd and logger failed

Also it can be checked by

zmloggerctl start 

This will show the following failure

Starting logswatch...ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.net.ssl.SSLHandshakeException 
sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed)
zimbra logger service is not enabled!  failed.

Resolved by

Genrating the self signed certificate once again

http://wiki.zimbra.com/wiki/Ajcody-Notes-SSLCerts#Recreating_Self-Signed_SSL_Certificates

** have zimbra running - ldap at least - need to double check this
** run as root
** Prep work
mv /opt/zimbra/ssl/zimbra /opt/zimbra/ssl/zimbra_old
** Creating new certs
/opt/zimbra/bin/zmcertmgr createca -new 
/opt/zimbra/bin/zmcertmgr deployca -localonly 
** others have just used: /opt/zimbra/bin/zmcertmgr deployca 
/opt/zimbra/bin/zmcertmgr createcrt self -new 
** others have just used: /opt/zimbra/bin/zmcertmgr createcrt -new
/opt/zimbra/bin/zmcertmgr verifycrt self 
/opt/zimbra/bin/zmcertmgr deploycrt self
** run as zimbra
zmcontrol stop
zmcontrol start

Check whether issue is resolved or not