Difference between revisions of "Failed to create jetty.pkcs12"

(Creating new troubleshooting page from content on Commercial Certificate in 5.x)
 
(add note about newline)
Line 5: Line 5:
 
  Error code: ZaCertWizard.prototype.installCallback Method: AjxException.UNKNOWN_ERROR Details:system failure: XXXXX  
 
  Error code: ZaCertWizard.prototype.installCallback Method: AjxException.UNKNOWN_ERROR Details:system failure: XXXXX  
 
  ERROR: failed to create jetty.pkcs12
 
  ERROR: failed to create jetty.pkcs12
 +
 +
On Zimbra 7.x, a common cause of this error is that the uploaded certificates do not contain a trailing newline.  To fix, simply edit the file with a text editor and ensure that there is a blank line after the "-----END CERTIFICATE-----" line.  On Linux, vi/vim does this by default.
  
 
check the following:
 
check the following:

Revision as of 23:58, 12 September 2011

If you are seeing the following error when you try to install the commercial certificate via Administration Console>Certificates,

Your certificate was not installed due to the error : system failure: XXXXX ERROR: failed to create jetty.pkcs12 
Message: Your certificate was not installed due to the error : system failure: XXXXX ERROR: failed to create jetty.pkcs12 
Error code: ZaCertWizard.prototype.installCallback Method: AjxException.UNKNOWN_ERROR Details:system failure: XXXXX 
ERROR: failed to create jetty.pkcs12

On Zimbra 7.x, a common cause of this error is that the uploaded certificates do not contain a trailing newline. To fix, simply edit the file with a text editor and ensure that there is a blank line after the "-----END CERTIFICATE-----" line. On Linux, vi/vim does this by default.

check the following:

1. Make sure the permissions of the /opt/zimbra/mailboxd/webapps/zimbraAdmin/tmp/ directory is set to 644 zimbra:zimbra.

2. Clear all the current aliases in the mailboxd keystore except for the jetty alias.

keytool -delete -alias tomcat -keystore /opt/zimbra/mailboxd/etc/keystore -storepass `zmlocalconfig -s -m nokey mailboxd_keystore_password`

3. If you are running ZCS version 5.0.5, comment out line #539 of the /opt/zimbra/bin/zmcertmgr utility before deploying the cert. This is bug 27581 [[1]].

4. Until 5.0.9, check that commercial.crt last char is a cr, bug 31034 [[2]].


Verified Against: ZCS 5.0.x Date Created: 9/17/2008
Article ID: https://wiki.zimbra.com/index.php?title=Failed_to_create_jetty.pkcs12 Date Modified: 2011-09-12



Try Zimbra

Try Zimbra Collaboration with a 60-day free trial.
Get it now »

Want to get involved?

You can contribute in the Community, Wiki, Code, or development of Zimlets.
Find out more. »

Looking for a Video?

Visit our YouTube channel to get the latest webinars, technology news, product overviews, and so much more.
Go to the YouTube channel »

Jump to: navigation, search