issue with EVP_PKEY_get1_RSA:expecting an rsa key:p_lib.c:287 about certbot-zimbra

[jjakob]

Added a section to the readme on how to fix this. Also 6382e0f the script will request a RSA key if it detects certbot >2.0.0 (where they added support for ECDSA keys and changed it to the default)

[maxxer]

If the problem is associated to the linked forum post, the root cause could be to look into certbot itself, as the command does generate the keys. I don't recall forcing any key type when requedsting the certificate.

Otherwise, could it be related to #148?

[killmasta93]

Thanks for the reply, it seems that i solved the issue looking at this

https://forums.zimbra.org/viewtopic.php?t=69645

[maxxer]

How exactly did you solve?

[killmasta93]

ran the certbot manually first, but because zmcertmgr could not verify i had to edit the zmcertmgr and comment out

#        my $keydg =
#          $self->run("$ssl rsa -noout -modulus -in '$keyf' | $ssl sha256");
#        my $crtdg =
#          $self->run("$ssl x509 -noout -modulus -in '$crtf' | $ssl sha256");

and added

        my $keydg =
          $self->run("$ssl pkey -pubout -in '$keyf' | $ssl sha256");
        my $crtdg =
          $self->run("$ssl x509 -noout -pubkey -in '$crtf' | $ssl sha256");

then re ran

su - zimbra -c "/opt/zimbra/bin/zmcertmgr verifycrt comm /tmp/privkey16.pem /tmp/cert16.pem /tmp/zimbra_chain16.pem"