mailboxd not running

Posted by: @zgokan

Hello

 

I have a zimbra server that I just installed. After purchasing and installing SSL, the service did not work. The logs have the following.

what could be the problem?

Release 9.0.0.ZEXTRAS.20220713.UBUNTU18.64 UBUNTU18_64 FOSS edition.

Client instead), java.lang.IllegalStateException: !STARTED: SslContextFactory@f083345[provider=null,keyStore=file:///opt/zimbra/mailboxd/etc/keystore,trustStore=null], java.lang.IllegalStateException: !STARTED: SslContextFactory@f083345[provider=null,keyStore=file:///opt/zimbra/mailboxd/etc/keystore,trustStore=null], java.lang.IllegalStateException: !STARTED: SslContextFactory@f083345[provider=null,keyStore=file:///opt/zimbra/mailboxd/etc/keystore,trustStore=null]]
        at org.eclipse.jetty.util.MultiException.ifExceptionThrow(MultiException.java:122)
        at org.eclipse.jetty.server.Server.doStart(Server.java:413)
        at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
        at org.eclipse.jetty.xml.XmlConfiguration.lambda$main$3(XmlConfiguration.java:1907)
        at java.base/java.security.AccessController.doPrivileged(AccessController.java:569)
        ... 8 more
        Suppressed: java.lang.IllegalStateException: KeyStores with multiple certificates are not supported on the base class org.eclipse.jetty.util.ssl.SslContextFactory. (Use org.eclipse.jetty.util.ssl.SslContextFactory$Server or org.eclipse.jetty.util.ssl.SslContextFactory$Client instead)
                at org.eclipse.jetty.util.ssl.SslContextFactory.newSniX509ExtendedKeyManager(SslContextFactory.java:1289)
                at org.eclipse.jetty.util.ssl.SslContextFactory.getKeyManagers(SslContextFactory.java:1271)
                at org.eclipse.jetty.util.ssl.SslContextFactory.load(SslContextFactory.java:373)
                at org.eclipse.jetty.util.ssl.SslContextFactory.doStart(SslContextFactory.java:244)
                at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
                at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
                at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
                at org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:97)
                at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
                at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
                at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
                at org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:323)
                at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
                at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:234)
                at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
                at org.eclipse.jetty.server.Server.doStart(Server.java:401)
                ... 11 more
        Suppressed: java.lang.IllegalStateException: !STARTED: SslContextFactory@f083345[provider=null,keyStore=file:///opt/zimbra/mailboxd/etc/keystore,trustStore=null]
                at org.eclipse.jetty.util.ssl.SslContextFactory.checkIsStarted(SslContextFactory.java:1466)
                at org.eclipse.jetty.util.ssl.SslContextFactory.newSSLEngine(SslContextFactory.java:1901)
                at org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:99)
                at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
                at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
                at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
                at org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:323)
                at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
                at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:234)
                at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
                at org.eclipse.jetty.server.Server.doStart(Server.java:401)
                ... 11 more
        Suppressed: java.lang.IllegalStateException: !STARTED: SslContextFactory@f083345[provider=null,keyStore=file:///opt/zimbra/mailboxd/etc/keystore,trustStore=null]
                at org.eclipse.jetty.util.ssl.SslContextFactory.checkIsStarted(SslContextFactory.java:1466)
                at org.eclipse.jetty.util.ssl.SslContextFactory.newSSLEngine(SslContextFactory.java:1901)
                at org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:99)
                at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
                at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
                at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
                at org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:323)
                at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
                at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:234)
                at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
                at org.eclipse.jetty.server.Server.doStart(Server.java:401)
                ... 11 more
        Suppressed: java.lang.IllegalStateException: !STARTED: SslContextFactory@f083345[provider=null,keyStore=file:///opt/zimbra/mailboxd/etc/keystore,trustStore=null]
                at org.eclipse.jetty.util.ssl.SslContextFactory.checkIsStarted(SslContextFactory.java:1466)
                at org.eclipse.jetty.util.ssl.SslContextFactory.newSSLEngine(SslContextFactory.java:1901)
                at org.eclipse.jetty.server.SslConnectionFactory.doStart(SslConnectionFactory.java:99)
                at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
                at org.eclipse.jetty.util.component.ContainerLifeCycle.start(ContainerLifeCycle.java:169)
                at org.eclipse.jetty.util.component.ContainerLifeCycle.doStart(ContainerLifeCycle.java:117)
                at org.eclipse.jetty.server.AbstractConnector.doStart(AbstractConnector.java:323)
                at org.eclipse.jetty.server.AbstractNetworkConnector.doStart(AbstractNetworkConnector.java:81)
                at org.eclipse.jetty.server.ServerConnector.doStart(ServerConnector.java:234)
                at org.eclipse.jetty.util.component.AbstractLifeCycle.start(AbstractLifeCycle.java:73)
                at org.eclipse.jetty.server.Server.doStart(Server.java:401)
                ... 11 more
Caused by: [CIRCULAR REFERENCE: java.lang.IllegalStateException: KeyStores with multiple certificates are not supported on the base class org.eclipse.jetty.util.ssl.SslContextFactory. (Use org.eclipse.jetty.util.ssl.SslContextFactory$Server or org.eclipse.jetty.util.ssl.SslContextFactory$Client instead)]

Usage: java -jar $JETTY_HOME/start.jar [options] [properties] [configs]
       java -jar $JETTY_HOME/start.jar --help  # for more information

Hi @zgokan,

If you are a Zextras Suite customer, I highly recommend opening a ticket to our Customer Support team here explaining your issue:  https://support.zextras.com/hc/en-us

They will certainly provide you with the best possible solution for the product.

@arman 

Unfortunately I'm not. Is there any solution? It works with self-signed SSL.

But it doesn't work with any other certificate authority.

Posted by: @zgokan

@arman 

Unfortunately I'm not. Is there any solution? It works with self-signed SSL.

But it doesn't work with any other certificate authority.

 

Hi @zgokan,

We have forwarded this issue to our team. As soon as we hear from them, we will come back to you.

Thank you for being with us.

Regards,

Arman

Posted by: @zgokan

@arman 

Unfortunately I'm not. Is there any solution? It works with self-signed SSL.

But it doesn't work with any other certificate authority.

 

@zgokan

I've just heard from our technical support regarding your question. Here is what you're looking for

https://forums.zimbra.org/viewtopic.php?t=71082&p=306259

Best regards,

Arman

@arman 

The problem has been fixed in the commercial version of zimbra. But it has not yet been fixed by Zextras. The latest released version is as follows. However, the problem persists.  (version: https://download.zextras.com/zcs-9.0.0_OSE_UBUNTU18_latest-zextras.tgz)

Could you please check again?

Latest Version: 9.0.0p25
Release Date: 2022-07-06T14:30:00+0000

Posted by: @zgokan

@arman 

The problem has been fixed in the commercial version of zimbra. But it has not yet been fixed by Zextras. The latest released version is as follows. However, the problem persists.  (version: https://download.zextras.com/zcs-9.0.0_OSE_UBUNTU18_latest-zextras.tgz)

Could you please check again?

Latest Version: 9.0.0p25
Release Date: 2022-07-06T14:30:00+0000

@zgokan

It seems weird since the two must be aligned in this. However, I forwarded the issue to our technical support team since it needs more investigation. We will return the result to you as soon as we hear from them.

@arman 

You are very kind. Thank you so much. I am waiting for information from you.