Re: SubjectAltName how does it work?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



 
> what happens when you run certutil -L -d . on both servers?  
> in alias directory?
> 
> try keeping the cert names consistent, that'll help in 
> troubleshooting.
> 


Ok...after these commands:

******CA*********

# ../shared/bin/certutil -N -d .

# ../shared/bin/certutil -S -d . -n 'CA Certificate' -s 'cn=CAcert' -x 
-t CTu,CTu,CTu -g 1024 -m 1 -v 120 -2 -1 -5


********Server 1********

 # ../shared/bin/certutil -R -d . -s "cn=nodo1,dc=domain,dc=example,dc=com"
-o tmpcertreq -g 1024
 # ../shares/bin/certutil -C -d . -c "CA Certificate" -i tmpcertreq -o
tmpcert.der -m 3 -v 120 -1 -5 -8 domain.example.com 
 # ../shared/bin/certutil -A -d . -n nodo1.domain.example.com -t u,u,u -i
tmpcert.der


*****Server 2*******


# ../shared/bin/certutil -R -d . -s "cn=nodo2,dc=domain,dc=example,dc=com"
-o tmpcertreq -g 1024
# ../shared/bin/certutil -C -d . -c "CA Certificate" -i tmpcertreq -o
tmpcert.der -m 9 -v 120 -1 -5 -8 domain.example.com
# ../shared/bin/certutil -A -d . -n Alt-Cert -t u,u,u -i tmpcert.der

# certutil -L -d .
CA Certificate			Ctu,Ctu,CTu
Nodo1.domain.example.com	u,u,u
Alt-Cert				u,u,u


*****MULTI MASTER REPLICATION*****

..after enabling ssl encrypt on both server...running mmr.pl script:

./mmr.pl --host1 nodo1.domain.example.com --host2 nodo2.domain.example.com
--host1_id 1 --host2_id 2 --bindpw secret --repmanpw secret --create
--with-ssl


******LOGS*****

..in nodo1 in logs:

[11/Apr/2006:17:56:58 +0000] NSMMReplicationPlugin - agmt="cn="Replication
to nodo2.domain.example.com"" (nodo2:636): Simple bind failed, LDAP sdk
error 81 (Can't contact LDAP server), Netscape Portable Runtime error -12276
(Unable to communicate securely with peer: requested domain name does not
match the server's certificate.)
[11/Apr/2006:17:56:58 +0000] NSMMReplicationPlugin - agmt="cn="Replication
to nodo2.domain.example.com"" (nodo2:636): Simple bind failed, LDAP sdk
error 81 (Can't contact LDAP server), Netscape Portable Runtime error -12276
(Unable to communicate securely with peer: requested domain name does not
match the server's certificate.)
[11/Apr/2006:17:57:01 +0000] NSMMReplicationPlugin - agmt="cn="Replication
to nodo2"" (nodo2:636): Simple bind failed, LDAP sdk error 81 (Can't contact
LDAP server), Netscape Portable Runtime error -12276 (Unable to communicate
securely with peer: requested domain name does not match the server's
certificate.)

************CONSIDERATIONS****************

Modifing as suggested from Richard:

../shares/bin/certutil -C -d . -c "CA Certificate" -i tmpcertreq -o
tmpcert.der -m 3 -v 120  -1 -5 -8 domain.example.com
<http://domain.example.com>

It says:

Bash: syntax error near unexpected token 'newline'


....I understood that the problem is how I wrote http , but I don't know how
to change it

Thanks in advance for your support

ALex






[Index of Archives]     [Fedora User Discussion]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora News]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora QA]     [Fedora Triage]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Yosemite Photos]     [Linux Apps]     [Maemo Users]     [Gnome Users]     [KDE Users]     [Fedora Tools]     [Fedora Art]     [Fedora Docs]     [Maemo Users]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Fedora ARM]

  Powered by Linux