Glenn wrote: > Thanks to all for the quick replies. The problem was indeed that the > correct nickname is "server-cert", not "Server-Cert". I am sure I tried > this yesterday, but I guess that was yesterday. This command does not work: > > certutil -L -d . -P slapd-myserver- > > It returns this error: > > certutil-bin: NSS_Initialize failed: An I/O error occurred during security > authorization. > > Part of the difficulty with certificates seems to be that the documentation > for the utilities is so sparse. If I knew that the nickname referred to the > name of a certificate rather than the name of the database file, this might > have been helpful. > > I checked up2date, and it did download something called "nss-ldap", but this > does not seem to have made a difference. > > I would like to be able to use certutil, so if you can think of any reasons > why it is not working, please share. Thanks again for your help. -Glenn. certutil is another NSS utility that ships with the directory server. It should be in the same place you found pk12util. rob -------------- next part -------------- A non-text attachment was scrubbed... Name: smime.p7s Type: application/x-pkcs7-signature Size: 3178 bytes Desc: S/MIME Cryptographic Signature Url : http://lists.fedoraproject.org/pipermail/389-users/attachments/20061115/a78634d3/attachment.bin