Today my Zimbra Mailserver (7.1.2) stopped working and it did not came back up with the following error message:
zimbra@zimbra:/~$ zmcontrol status Unable to determine enabled services from ldap. Unable to determine enabled services. Cache is out of date or doesn't exist.
After crawling through the configuration i figured out that the SSL certificate expired today:
root@zimbra:~# /opt/zimbra/bin/zmcertmgr viewdeployedcrt all |grep notAfter notAfter=Aug 19 14:11:20 2012 GMT
I created a new self-signed certificate to verify that this was the root cause for this issue. As this is a free self-signed certificate i created it with a lifetime of 3 years:
/opt/zimbra/bin/zmcertmgr createca -new /opt/zimbra/bin/zmcertmgr createcrt -new -days 1095 /opt/zimbra/bin/zmcertmgr deploycrt self /opt/zimbra/bin/zmcertmgr deployca
I rebooted the server to make sure it is reboot safe. All Services came back up and zimbra is running:
zimbra@zimbra:/~$ zmcontrol status Host antispam Running ldap Running logger Running mailbox Running mta Running snmp Running spell Running stats Running zmconfigd Running
Please note that no E-Mails are processed during the downtime. That does not mean that they are lost, but as they are processed later, they may show up with a wrong time.