Zimbra email server certificate expiration solution

Zimbra mail server certificate expiration solution generally, the certificate expires, the mailbox client will repeatedly enter the password, use the web version to log on, you cannot log on successfully, after entering the command management interface, if you use the following operations, an error occurs. [Zimbra @ zcs ~] $ Zmcontro... zimbra mail server certificate expiration solution generally, the certificate expires, the mailbox client will repeatedly enter the password, use the web version to log on, you cannot log on successfully, after entering the command management interface, if you use the following operations, an error occurs. [Zimbra @ zcs ~] $ Zmcontrol status Unable to determine enabled services fromldap. unable to determine enabled services. cache is out of date ordoesn' t exist. there are four possible causes for the above error: ZCS certificate problems Zimbra file permissions problems LDAP data problems DNS problems this article mainly describes the certificate expiration issues, generally, the zimbra mailbox server has been in use for about a year. if this problem occurs, you must first consider the certificate expiration issue. When zimbra is newly installed, the self-issued certificate is valid for 365 days, that is, 1 year. To avoid the trouble of the next time, we can re-issue a certificate, and the validity period can be set by ourselves. in the following example, the validity period is 10 years. The command is as follows: /opt/zimbra/bin/zmcertmgr createca-new/opt/zimbra/bin/zmcertmgr deployca/opt/zimbra/bin/zmcertmgr createcrt-new-days 3650 the subsequent numbers are certificates service life, run/opt/zimbra/bin/zmcertmgr deploycrt self/opt/zimbra/bin/zmcertmgr viewdeployedcrt on a daily basis to restart the zimbra mailbox server, run the zmcontrolrestart command to check whether all services are enabled, and then re-send and receive emails on the client. if the above code is entered correctly, the mailbox can be used normally.