ZeXtras Suite Zimlet removal failed

[andy777]

Hi,

I am trying to uninstall ZeXtras Suite Zimlet and it is failing with the errors below.

Here is what I use:
OS
Linux hostname 3.5.0-23-generic #35~precise1-Ubuntu SMP Fri Jan 25 17:13:26 UTC 2013 x86_64 x86_64 x86_64 GNU/Linux
Zimbra
Release 8.0.4.GA.5737.UBUNTU12.64 UBUNTU12_64 FOSS edition
zextras_suite-1.8.8

./install.sh -u zimlet

+++++++++
Beginning ZeXtras Suite Zimlet removal procedure ...


The ZeXtras Suite Zimlet will be removed. Proceed? [N] Y

Uninstalling the ZeXtras Suite Zimlet ...

com.zimbra.common.zclient.ZClientException: invoke sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors, server: localhost
ExceptionId:main:1376598047448:bad522a237ec8712
Code:zclient.IO_ERROR
at com.zimbra.common.zclient.ZClientException.IO_ERRO R(ZClientException.java:45)
at com.zimbra.cs.account.soap.SoapProvisioning.invoke (SoapProvisioning.java:454)
at com.zimbra.cs.account.soap.SoapProvisioning.soapAd minAuthenticate(SoapProvisioning.java:394)
at com.zimbra.cs.zimlet.ZimletUtil$ZimletSoapUtil.ini tZimletSoapUtil(ZimletUtil.java:1387)
at com.zimbra.cs.zimlet.ZimletUtil$ZimletSoapUtil.<in it>(ZimletUtil.java:1361)
at com.zimbra.cs.zimlet.ZimletUtil.dispatch(ZimletUti l.java:1815)
at com.zimbra.cs.zimlet.ZimletUtil.main(ZimletUtil.ja va:1907)
Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors
at sun.security.ssl.Alerts.getSSLException(Alerts.jav a:192)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl .java:1886)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.jav a:276)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.jav a:270)
at sun.security.ssl.ClientHandshaker.serverCertificat e(ClientHandshaker.java:1341)
at sun.security.ssl.ClientHandshaker.processMessage(C lientHandshaker.java:153)
at sun.security.ssl.Handshaker.processLoop(Handshaker .java:868)
at sun.security.ssl.Handshaker.process_record(Handsha ker.java:804)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocke tImpl.java:1016)
at sun.security.ssl.SSLSocketImpl.performInitialHands hake(SSLSocketImpl.java:1312)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLS ocketImpl.java:1339)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLS ocketImpl.java:1323)
at com.zimbra.common.net.CustomSSLSocket.startHandsha ke(CustomSSLSocket.java:93)
at com.zimbra.common.net.CustomSSLSocket.getInputStre am(CustomSSLSocket.java:358)
at org.apache.commons.httpclient.HttpConnection.open( HttpConnection.java:745)
at org.apache.commons.httpclient.MultiThreadedHttpCon nectionManager$HttpConnectionAdapter.open(MultiThr eadedHttpConnectionManager.java:1361)
at org.apache.commons.httpclient.HttpMethodDirector.e xecuteWithRetry(HttpMethodDirector.java:387)
at org.apache.commons.httpclient.HttpMethodDirector.e xecuteMethod(HttpMethodDirector.java:171)
at org.apache.commons.httpclient.HttpClient.executeMe thod(HttpClient.java:397)
at com.zimbra.common.soap.SoapHttpTransport.invoke(So apHttpTransport.java:238)
at com.zimbra.common.soap.SoapHttpTransport.invoke(So apHttpTransport.java:167)
at com.zimbra.common.soap.SoapTransport.invoke(SoapTr ansport.java:386)
at com.zimbra.common.soap.SoapTransport.invokeWithout Session(SoapTransport.java:372)
at com.zimbra.cs.account.soap.SoapProvisioning.invoke Request(SoapProvisioning.java:442)
at com.zimbra.cs.account.soap.SoapProvisioning.invoke (SoapProvisioning.java:450)
... 5 more
Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors
at sun.security.validator.PKIXValidator.doValidate(PK IXValidator.java:350)
at sun.security.validator.PKIXValidator.engineValidat e(PKIXValidator.java:260)
at sun.security.validator.Validator.validate(Validato r.java:260)
at sun.security.ssl.X509TrustManagerImpl.validate(X50 9TrustManagerImpl.java:326)
at sun.security.ssl.X509TrustManagerImpl.checkTrusted (X509TrustManagerImpl.java:231)
at sun.security.ssl.X509TrustManagerImpl.checkServerT rusted(X509TrustManagerImpl.java:126)
at sun.security.ssl.ClientHandshaker.serverCertificat e(ClientHandshaker.java:1323)
... 25 more
Caused by: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors
at sun.security.provider.certpath.PKIXCertPathValidat or.engineValidate(PKIXCertPathValidator.java:208)
at java.security.cert.CertPathValidator.validate(Cert PathValidator.java:279)
at sun.security.validator.PKIXValidator.doValidate(PK IXValidator.java:345)
... 31 more
[] ERROR: Error
com.zimbra.common.zclient.ZClientException: invoke sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors, server: localhost
ExceptionId:main:1376598047448:bad522a237ec8712
Code:zclient.IO_ERROR
at com.zimbra.common.zclient.ZClientException.IO_ERRO R(ZClientException.java:45)
at com.zimbra.cs.account.soap.SoapProvisioning.invoke (SoapProvisioning.java:454)
at com.zimbra.cs.account.soap.SoapProvisioning.soapAd minAuthenticate(SoapProvisioning.java:394)
at com.zimbra.cs.zimlet.ZimletUtil$ZimletSoapUtil.ini tZimletSoapUtil(ZimletUtil.java:1387)
at com.zimbra.cs.zimlet.ZimletUtil$ZimletSoapUtil.<in it>(ZimletUtil.java:1361)
at com.zimbra.cs.zimlet.ZimletUtil.dispatch(ZimletUti l.java:1815)
at com.zimbra.cs.zimlet.ZimletUtil.main(ZimletUtil.ja va:1907)
Caused by: javax.net.ssl.SSLHandshakeException: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors
at sun.security.ssl.Alerts.getSSLException(Alerts.jav a:192)
at sun.security.ssl.SSLSocketImpl.fatal(SSLSocketImpl .java:1886)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.jav a:276)
at sun.security.ssl.Handshaker.fatalSE(Handshaker.jav a:270)
at sun.security.ssl.ClientHandshaker.serverCertificat e(ClientHandshaker.java:1341)
at sun.security.ssl.ClientHandshaker.processMessage(C lientHandshaker.java:153)
at sun.security.ssl.Handshaker.processLoop(Handshaker .java:868)
at sun.security.ssl.Handshaker.process_record(Handsha ker.java:804)
at sun.security.ssl.SSLSocketImpl.readRecord(SSLSocke tImpl.java:1016)
at sun.security.ssl.SSLSocketImpl.performInitialHands hake(SSLSocketImpl.java:1312)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLS ocketImpl.java:1339)
at sun.security.ssl.SSLSocketImpl.startHandshake(SSLS ocketImpl.java:1323)
at com.zimbra.common.net.CustomSSLSocket.startHandsha ke(CustomSSLSocket.java:93)
at com.zimbra.common.net.CustomSSLSocket.getInputStre am(CustomSSLSocket.java:358)
at org.apache.commons.httpclient.HttpConnection.open( HttpConnection.java:745)
at org.apache.commons.httpclient.MultiThreadedHttpCon nectionManager$HttpConnectionAdapter.open(MultiThr eadedHttpConnectionManager.java:1361)
at org.apache.commons.httpclient.HttpMethodDirector.e xecuteWithRetry(HttpMethodDirector.java:387)
at org.apache.commons.httpclient.HttpMethodDirector.e xecuteMethod(HttpMethodDirector.java:171)
at org.apache.commons.httpclient.HttpClient.executeMe thod(HttpClient.java:397)
at com.zimbra.common.soap.SoapHttpTransport.invoke(So apHttpTransport.java:238)
at com.zimbra.common.soap.SoapHttpTransport.invoke(So apHttpTransport.java:167)
at com.zimbra.common.soap.SoapTransport.invoke(SoapTr ansport.java:386)
at com.zimbra.common.soap.SoapTransport.invokeWithout Session(SoapTransport.java:372)
at com.zimbra.cs.account.soap.SoapProvisioning.invoke Request(SoapProvisioning.java:442)
at com.zimbra.cs.account.soap.SoapProvisioning.invoke (SoapProvisioning.java:450)
... 5 more
Caused by: sun.security.validator.ValidatorException: PKIX path validation failed: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors
at sun.security.validator.PKIXValidator.doValidate(PK IXValidator.java:350)
at sun.security.validator.PKIXValidator.engineValidat e(PKIXValidator.java:260)
at sun.security.validator.Validator.validate(Validato r.java:260)
at sun.security.ssl.X509TrustManagerImpl.validate(X50 9TrustManagerImpl.java:326)
at sun.security.ssl.X509TrustManagerImpl.checkTrusted (X509TrustManagerImpl.java:231)
at sun.security.ssl.X509TrustManagerImpl.checkServerT rusted(X509TrustManagerImpl.java:126)
at sun.security.ssl.ClientHandshaker.serverCertificat e(ClientHandshaker.java:1323)
... 25 more
Caused by: java.security.cert.CertPathValidatorException: Path does not chain with any of the trust anchors
at sun.security.provider.certpath.PKIXCertPathValidat or.engineValidate(PKIXCertPathValidator.java:208)
at java.security.cert.CertPathValidator.validate(Cert PathValidator.java:279)
at sun.security.validator.PKIXValidator.doValidate(PK IXValidator.java:345)
... 31 more

ZeXtras Suite Zimlet removal failed. Exiting.
+++++++++++

I appreciate any ideas on how to fix this.

Andy

[d0s0n]

Hi Andy and welcome to our forums!

your issue has nothing to do with ZeXtras, your zimbra server has a problem with SSL certificate, it's probably expired... as often happens.

So try to reinstall or recreate your certificate.

Have a nice day!
D0s0n

[andy777]

Thanks D0s0n,

That was not an SSL cert expiration issue, but closely related to it.
After I installed ZeExtras I've issued a new self signed cert for Zimbra.
When I've reverted to original Zimbra cert I was able to uninstall zimlet.

Thanks again for a good advice!