Dear Team,
I started installing zimbra 9 on CentOS 7. During installation, I get below error.
The system will be modified - continue? [No] Yes
Operations logged to /tmp/zmsetup.20230804-084314.log
Setting local config values...done.
Initializing core config...Setting up CA...done.
Deploying CA to /opt/zimbra/conf/ca ...done.
Creating SSL zimbra-store certificate...done.
Creating new zimbra-ldap SSL certificate...done.
Creating new zimbra-mta SSL certificate...done.
Creating new zimbra-proxy SSL certificate...done.
Installing mailboxd SSL certificates...failed.
file /tmp/zmsetup.20230804-084314.log shows below info.
** Installing imapd certificate '/opt/zimbra/conf/imapd.crt' and key '/opt/zimbra/conf/imapd.key'
** Copying '/opt/zimbra/ssl/zimbra/server/server.crt' to '/opt/zimbra/conf/imapd.crt'
** Copying '/opt/zimbra/ssl/zimbra/server/server.key' to '/opt/zimbra/conf/imapd.key'
** Creating file '/opt/zimbra/ssl/zimbra/jetty.pkcs12'
ERROR: openssl pkcs12 export to '/opt/zimbra/ssl/zimbra/jetty.pkcs12' failed(1):
Error creating PKCS12 MAC; no PKCS12KDF support?
Use -nomac if MAC not required and PKCS12KDF support not available.
40B7FCBF447F0000:error:0308010C:digital envelope routines:(unknown function):unsupported:crypto/evp/evp_fetch.c:373:Global default library context, Algorithm (PKCS12KDF : 192), Properties (<null>)
40B7FCBF447F0000:error:1180006B:PKCS12 routines:(unknown function):key gen error:crypto/pkcs12/p12_mutl.c:147:
40B7FCBF447F0000:error:1180006D:PKCS12 routines:(unknown function):mac generation error:crypto/pkcs12/p12_mutl.c:220:
Fri Aug 4 08:46:47 2023 failed.
How can I solve this? I think this is related to PKCS12.
I found instructions on zimbra website as below
https://wiki.zimbra.com/wiki/Zimbra_Releases/9.0.0/P34
It seems to be related to openssl's IPFS, you can try to disable IPFS and then run /opt/zimbra/libexec/zmsetup.pl to continue the installation.