Mailbox failure due to Certificate expiry
Appearance
Mailbox failure due to Certificate expiry
Diagnosed By
su - zimbra -c "zmcontrol status"
This will show
mailboxd and logger failed
Also it can be checked by
zmloggerctl start
This will show the following failure
Starting logswatch...ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.net.ssl.SSLHandshakeException sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: timestamp check failed) zimbra logger service is not enabled! failed.
Resolved by
Genrating the self signed certificate once again
http://wiki.zimbra.com/wiki/Ajcody-Notes-SSLCerts#Recreating_Self-Signed_SSL_Certificates
** have zimbra running - ldap at least - need to double check this ** run as root ** Prep work mv /opt/zimbra/ssl/zimbra /opt/zimbra/ssl/zimbra_old ** Creating new certs /opt/zimbra/bin/zmcertmgr createca -new /opt/zimbra/bin/zmcertmgr deployca -localonly ** others have just used: /opt/zimbra/bin/zmcertmgr deployca /opt/zimbra/bin/zmcertmgr createcrt self -new ** others have just used: /opt/zimbra/bin/zmcertmgr createcrt -new /opt/zimbra/bin/zmcertmgr verifycrt self /opt/zimbra/bin/zmcertmgr deploycrt self ** run as zimbra zmcontrol stop zmcontrol start
Check whether issue is resolved or not