I'm walking through http://www.csse.uwa.edu.au/~ashley/fedora-ds/fedora-ds-26072006.html. I have attempted it several times and each time it fails in the exact same place. I get "pk12util-bin: PKCS12 decode import bags failed: You are attempting to import a cert with the same issuer/serial as an existing cert, but that is not the same cert." It fails for the same reason every time. I can get only one of the two certificates imported into each of the two databases. Each time, I can only import the "DS-Server-Cert". The other fails as above. I can confirm the DS-Server-Cert has been added via the GUI interface. [root at host fedora-ds]# /opt/fedora-ds/shared/bin/pk12util -i /tmp/ldap/server.p12 -d alias -P admin-serv-host- Enter Password or Pin for "NSS Certificate DB": Enter Password or Pin for "NSS Certificate DB": Enter password for PKCS12 file: pk12util-bin: PKCS12 IMPORT SUCCESSFUL [root at host fedora-ds]# /opt/fedora-ds/shared/bin/pk12util -i /tmp/admingui/server.p12 -d alias -P admin-serv-host- Enter Password or Pin for "NSS Certificate DB": Enter password for PKCS12 file: pk12util-bin: PKCS12 decode import bags failed: You are attempting to import a cert with the same issuer/serial as an existing cert, but that is not the same cert. Cheers, Greg Copeland > -----Original Message----- > From: fedora-directory-users-bounces at redhat.com [mailto:fedora-directory- > users-bounces at redhat.com] On Behalf Of ashley > Sent: Tuesday, April 17, 2007 11:53 PM > To: General discussion list for the Fedora Directory server project. > Subject: RE: ldap and certificate > > > Sorry our optic fibre link was down. So hence even though our server was > up you can't get to it. > > Well our link is back up, so it should be there. > > > Cheers then, Ashley > > On Tue, 17 Apr 2007, Greg Copeland wrote: > > > I get no reply, via ping or browser, from that address. > > > > > > Cheers, > > > > Greg Copeland > > > >> -----Original Message----- > >> From: fedora-directory-users-bounces at redhat.com > > [mailto:fedora-directory- > >> users-bounces at redhat.com] On Behalf Of ashley > >> Sent: Monday, April 16, 2007 10:11 PM > >> To: General discussion list for the Fedora Directory server project. > >> Subject: Re: ldap and certificate > >> > >> > >> I've written a guide to get the LDAPS working with self signed > >> certificates which show all the steps involved from certificate > > creation > >> to LDAPS from a to z. > >> > >> The guide you find is located here > >> > >> http://www.csse.uwa.edu.au/~ashley/ > > > > > > > > -- > > Fedora-directory-users mailing list > > Fedora-directory-users at redhat.com > > https://www.redhat.com/mailman/listinfo/fedora-directory-users > > > > > > !DSPAM:272,462586ab275702143498666! > > > > -- > Ashley Chew - Systems Administrator > School of Computer Science and Software Engineering > University of Western Australia > Tel: (+61 8) 6488 7082 - Fax: (+61 8) 6488 1089 > Ashley[@]csse.uwa.edu.au - http://www.csse.uwa.edu.au/~ashley > > "There is no such thing as Fate, Fate is what you make of it!" > > -- > Fedora-directory-users mailing list > Fedora-directory-users at redhat.com > https://www.redhat.com/mailman/listinfo/fedora-directory-users
