Error when trying to start mailbox services: Difference between revisions
mNo edit summary |
No edit summary |
||
(7 intermediate revisions by the same user not shown) | |||
Line 1: | Line 1: | ||
== | {{BC|Certified}} | ||
__FORCETOC__ | |||
<div class="col-md-12 ibox-content"> | |||
="Keystore was tampered with.." error when trying to start mailbox services= | |||
{{KB|{{ZC}}|{{ZCS 8.8}}|{{ZCS 8.7}}|{{ZCS 8.6}}|{{ZCS 8.5}}|}} | |||
====Problem==== | |||
Error when trying to start mailbox services: | |||
Exception in thread "main" java.io.IOException: Keystore was tampered with, or password was incorrect | |||
at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:771) | |||
at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:38) | |||
at java.security.KeyStore.load(KeyStore.java:1185) | |||
====Solution==== | |||
This problem comes up because the Java keystore is either changed, or not accessible. | |||
Regenerating the certificates creates a new keystore. | |||
To do so, first move the old keystore: | |||
mv /opt/zimbra/mailboxd/etc/keystore /root/keystore.old | mv /opt/zimbra/mailboxd/etc/keystore /root/keystore.old | ||
Then re-generate certificates and restart the mailbox service: | |||
/opt/zimbra/bin/zmcertmgr createca -new | /opt/zimbra/bin/zmcertmgr createca -new | ||
/opt/zimbra/bin/zmcertmgr createcrt -new -days 3650 | /opt/zimbra/bin/zmcertmgr createcrt -new -days 3650 | ||
Line 26: | Line 30: | ||
/opt/zimbra/bin/zmcertmgr deploycrt self | /opt/zimbra/bin/zmcertmgr deploycrt self | ||
/opt/zimbra/bin/zmcertmgr viewdeployedcrt | /opt/zimbra/bin/zmcertmgr viewdeployedcrt | ||
zmmailboxdctl restart | |||
Submitted by: Sourabh Bhushan | |||
{{Article Footer|ZCS 8.8, 8.7, 8.6|08/08/2017}} | |||
Latest revision as of 13:01, 15 May 2018
"Keystore was tampered with.." error when trying to start mailbox services
Problem
Error when trying to start mailbox services:
Exception in thread "main" java.io.IOException: Keystore was tampered with, or password was incorrect at sun.security.provider.JavaKeyStore.engineLoad(JavaKeyStore.java:771) at sun.security.provider.JavaKeyStore$JKS.engineLoad(JavaKeyStore.java:38) at java.security.KeyStore.load(KeyStore.java:1185)
Solution
This problem comes up because the Java keystore is either changed, or not accessible. Regenerating the certificates creates a new keystore.
To do so, first move the old keystore:
mv /opt/zimbra/mailboxd/etc/keystore /root/keystore.old
Then re-generate certificates and restart the mailbox service:
/opt/zimbra/bin/zmcertmgr createca -new /opt/zimbra/bin/zmcertmgr createcrt -new -days 3650 /opt/zimbra/bin/zmcertmgr deployca /opt/zimbra/bin/zmcertmgr deploycrt self /opt/zimbra/bin/zmcertmgr viewdeployedcrt zmmailboxdctl restart
Submitted by: Sourabh Bhushan