Re: SubjectAltName how does it work?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Alessandro Binarelli wrote:
> Hi,
> today, I'm trying to solve ssl issue to comunicate from DS Fedora to 
> both client and another DS server for replication..after many test, 
> with your help I catched up this point:
>
> I'm always in alias directory.
>
> Create my CA database:
> # ../shared/bin/certutil -N -d .
>
> Make my self CA:
>
> # ../shared/bin/certutil -S -d . -n 'CA Certificate' -s 'cn=CAcert' -x 
> -t CTu,CTu,CTu -g 1024 -m 1 -v 120 -2 -1 -5
>
>
> Create server key and certificate for server1:
>
> # ../shared/bin/certutil -R -d . -s "cn=nodo1,dc=domain,dc=example,dc=com" -o tmpcertreq 
> -g 1024
> # ../shares/bin/certutil -C -d . -c "CA Certificate" -i tmpcertreq -o 
> tmpcert.der -m 3 -v 12 
> -1 -5 -8 domain.example.com <http://domain.example.com>
> # ../shared/bin/certutil -A -d . -n nodo1.domain.example.com <http://nodo1.domain.example.com> -t u,u,u -i 
> tmpcert.der
> #rm -f tmpcert.der tmpcertreq
>
> Create server key and certificate for server2:
>
> # ../shared/bin/certutil -R -d . -s "cn=nodo2,dc=domain,dc=example,dc=com" -o tmpcertreq 
>
> -g 1024
> # ../shares/bin/certutil -C -d . -c "CA Certificate" -i tmpcertreq -o tmpcert.der -m 4 -v 12 
> -1 -5 -8 domain.example.com <http://domain.example.com>
>
> # ../shared/bin/certutil -A -d . -n Alt-Cert -t u,u,u -i tmpcert.der
> #rm -f tmpcert.der tmpcertreq
>  
> After that I copy database on server 2 and rename it to match with correct server...finally I enable ssl encrypt on both servers
>   
On server2 - did you change Alt-Cert to Server-Cert in the cert 
database, or did you change the attribute
nsSSLPersonalitySSL in entry cn=RSA,cn=encryption,cn=config to be 
Alt-Cert instead of Server-Cert?
> and I try to establish Multi Master Replication via mmr.pl script...so:
>
> ./mmr.pl --host1 nodo1.domain.example.com <http://nodo1.domain.example.com> --host2 
> nodo2.domain.example.com <http://nodo2.domain.example.com> --host1_id 1 --host2_id 2 --bindpw secret
> --repmanpw secret --create --with-ssl
>
> unfortunately consulting logs I find:
>   
In which log is this?
> NSMMReplicationPlugin - agmt="cn="Replication
>
> to nodo2.domain.example.com <http://nodo2.domain.example.com>"" (nodo2:636): Simple bind failed, LDAP sdk
> error 91 (Can't connect to the LDAP server), Netscape Portable Runtime error
> -5961 (TCP connection reset by peer.)
>
>
>   
> It's incredible that when I find solution for something, at the same 
> time I find problem in another point :-)
>
> Thanks in advance for support
>
> Alex
>
>
>  
> ------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3178 bytes
Desc: S/MIME Cryptographic Signature
Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20060410/ba3128fc/attachment.bin 


[Index of Archives]     [Fedora User Discussion]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora News]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora QA]     [Fedora Triage]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Yosemite Photos]     [Linux Apps]     [Maemo Users]     [Gnome Users]     [KDE Users]     [Fedora Tools]     [Fedora Art]     [Fedora Docs]     [Maemo Users]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Fedora ARM]

  Powered by Linux