http://wiki.zimbra.com/wiki/Recreating_a_Self-Signed_SSL_Certificate_in_ZCS_4.5_%26_5.0
All commands as root except where specified.
/opt/zimbra/bin/keytool -delete -alias my_ca -keystore /opt/zimbra/java/jre/lib/security/cacerts -storepass changeit
/opt/zimbra/jdk1.5.0_15/bin/keytool -delete -alias my_ca -keystore /opt/zimbra/java/jre/lib/security/cacerts -storepass changeit
/opt/zimbra/jdk1.5.0_15/bin/keytool -delete -alias jetty -keystore /opt/zimbra/mailboxd/etc/keystore -storepass changeit
zmlocalconfig -s -m nokey mailboxd_keystore_password # as zimbra user
/opt/zimbra/jdk1.5.0_15/bin/keytool -delete -alias jetty -keystore /opt/zimbra/mailboxd/etc/keystore -storepass password_from_last_command
/opt/zimbra/bin/zmcertmgr createca -new
/opt/zimbra/bin/zmcertmgr deployca -localonly
/opt/zimbra/bin/zmcertmgr createcrt self -new
/opt/zimbra/bin/zmcertmgr verifycrt self
/opt/zimbra/bin/zmcertmgr deploycrt self
zmprov -l gcf zimbraCertAuthorityKeySelfSigned # as zimbra
ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.naming.CommunicationException -n:389)
zmprov -l gcf zimbraCertAuthorityCertSelfSigned # as zimbra
ERROR: service.FAILURE (system failure: ZimbraLdapContext) (cause: javax.naming.CommunicationException -n:389)