Installation and Upgrade • Re: Zimbra 8.6 patch 7 to 8.7 fails when almost finished

Hi, im doing this test, im still getting this message:
Caused by: javax.net.ssl.SSLHandshakeException: java.security.cert.CertificateException: Certificates does not conform to algorithm constraints

and getting

Saving SSL Certificate in ldap...failed.

Thanks.

[Edit] Fixit
Recreate SSL certificates and rerun zmstup.pl withput any mod.

Since i received no responses to this thread nor to the bug report I filed: https://bugzilla.zimbra.com/show_bug.cgi?id=105943 I decided to try debugging deeper.

I could not get the "/opt/zimbra/bin/zmcertmgr deployca" command to work so I decided to manually modify the /opt/zimbra/libexec/zmsetup.pl script after the installer crashed and run it again. I just removed the deployca step by commenting out configSaveCA on line 6878. I.e. changing "configSaveCA" to "#configSaveCA".

This time, when running /opt/zimbra/libexec/zmsetup.pl manually everything else works fine and I made sure to run the manual commands required for 8.7 as well.

In short this serves as a workaround although I'm still not sure why it failed so I'm keeping this thread and bugreport open to try to resolve this issue 100%

/Kris

Mon Feb  5 23:34:03 2024 *** Running as zimbra user: /opt/zimbra/bin/zmcertmgr deployca** Saving config key 'zimbraCertAuthorityCertSelfSigned' via zmprov modifyConfig...failed (rc=2)

Statistics: Posted by rojoblandino — Tue Feb 06, 2024 6:54 am