Zimbra certificate expiration problem solved

1. generally, when the certificate expires, the mailbox client will repeatedly enter the password. If you log on with the web edition, you cannot log on successfully. after entering the command management interface, use the following operations, an error occurs.

Zimbra @ zcs ~] $ Zmcontrol status
Unable to determine enabled services fromldap.
Unable to determine enabled services. Cache is out of date ordoesn't exist.

2. There are four possible causes for the above errors:

1) ZCS certificate Problems
2) Zimbra File Permissions
3) LDAP data problems
4) DNS Problems

3. Generally, the zimbra mailbox server is set up for about one year (the zimbra8.x certificate is valid for five years). If such a problem occurs, you must first consider the certificate expiration issue. When zimbra is newly installed, the self-issued certificate is valid for 365 days, that is, 1 year. To avoid the trouble of the next time, we can re-issue a certificate, and the validity period can be set by ourselves. In the following example, the validity period is 10 years. The command is as follows:

/Opt/zimbra/bin/zmcertmgr createca-new
/Opt/zimbra/bin/zmcertmgr deployca
/Opt/zimbra/bin/zmcertmgr createcrt-new-days 3650 the number after which is the validity period of the certificate, in days
/Opt/zimbra/bin/zmcertmgr deploycrt self
/Opt/zimbra/bin/zmcertmgr viewdeployedcrt

After you have typed the preceding command, restart the zimbra mailbox server, run the zmcontrolrestart command to check whether all services are enabled, and then re-send and receive emails on the client. If the above Code is entered correctly, the mailbox can be used normally.