The usual reason for this error is expired an SSL certificate.

This error usually happens if your SSL certificate has expired. There are two solutions for this problem.

The first solution is renewing your certificate and deploying it with the following command :

[zimbra@ck]$ /opt/zimbra/bin/zmcertmgr deploycrt comm /opt/zimbra/ssl/zimbra/commercial/your_new_ssl.crt /path/to/ca_bundle.crt

After this you need to restart zmcontrol.

The second solution is regenerating self-signed certificate.

[zimbra@ck]$ su – zimbra -c ‘zmcontrol stop’
[zimbra@ck]$ rm -rf /opt/zimbra/ssl/*
[zimbra@ck]$ rm -rf /opt/zimbra/ssl/.rnd
[zimbra@ck]$ /opt/zimbra/java/bin/keytool -delete -alias my_ca -keystore /opt/zimbra/java/jre/lib/security/cacerts -storepass changeit
[zimbra@ck]$ /opt/zimbra/java/bin/keytool -delete -alias jetty -keystore /opt/zimbra/mailboxd/etc/keystore -storepass `su – zimbra -c ‘zmlocalconfig -s -m nokey mailboxd_keystore_password’`

Then you need to edit  /opt/zimbra/bin/zmcertmgr file ( you can use ‘vi’ )

Find validation_days=365 and change to validation_days=3650

And save /opt/zimbra/bin/zmcertmgr

[zimbra@ck]$ /opt/zimbra/bin/zmcertmgr createca -new
[zimbra@ck]$ /opt/zimbra/bin/zmcertmgr deployca -localonly
[zimbra@ck]$ /opt/zimbra/bin/zmcertmgr createcrt self -new
[zimbra@ck]$ /opt/zimbra/bin/zmcertmgr deploycrt self

[zimbra@ck]$ su – zimbra -c ‘zmcontrol start’

[zimbra@ck]$ /opt/zimbra/bin/zmcertmgr deploycrt self
[zimbra@ck]$ /opt/zimbra/bin/zmcertmgr deployca

[zimbra@ck]$ su – zimbra -c ‘zmupdateauthkeys’
[zimbra@ck]$ /opt/zimbra/bin/zmcertmgr viewdeployedcrt

The post (Zimbra Mail Server) Unable to determine enabled services from LDAP appeared first on VeriTeknik.