[389-users] ssl replication

[solarflow99 <solarflow99@xxxxxxxxx>]

I'm trying to configure replication over SSL using StartTLS, I don't see any example of how to export/import self signed certs into the slave.  Here's what I did:
created a CA cert and server cert on the master, everything is fine.  exported the CA cert and copied it to the slave:


[root@ldapslave]# certutil -A -d . -n "CA certificate" -t "CT,," -a -i cacert.asc

[root@ldapslave]# certutil -d . -L

Certificate Nickname                                         Trust Attributes
                                                             SSL,S/MIME,JAR/XPI

CA certificate                                               CT,,



What is next?  I tried everything I could think of..

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users