Re: inf file directive for CA certificate file

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Thanks Rich,

 

Still, there is a difference when CA certificate is supplied when prompted and when listed in inf file.

In the latter case, neither the certificate will be imported, nor adm.conf will be updated with the ldap url submitted.

 

In the interactive mode, CA certificate  gets imported in Admin Server cert8.db.

 

I will refrain from using it in inf files.

 

 

Jovan Vukotić • Senior Software Engineer • Ambit Treasury Management • SunGard • Banking • Bulevar Milutina Milankovića 136b, Belgrade, Serbia • tel: +381.11.6555-66-1 • jovan.vukotic@xxxxxxxxxxx

 

 

 

 

From: Rich Megginson [mailto:rmeggins@xxxxxxxxxx]
Sent: Friday, June 14, 2013 3:26 PM
To: General discussion list for the 389 Directory server project.
Cc: Vukotic, Jovan
Subject: Re: [389-users] inf file directive for CA certificate file

 

On 06/14/2013 05:47 AM, Jovan.VUKOTIC@xxxxxxxxxxx wrote:

Hi,

 

We are starting installations of four 389 DS, version 1.2.11 and would like to pass an inf file together with command line parameters to

setup-ds-admin.pl script.

At the moment we have one 389 DS instance installed where Configuration Directory (o=NetscapeRoot ) is placed and where TLS/SSL is enabled.

 

However, I cannot find an inf file directive for CA certificate file that we are prompted to supply when the script is run interactively. We need that file since a ldap URL to configuration directory is supplied in the form

ldaps://ds1.example.com:636/o=NetscapeRoot


The directive is called CACertificate in the [General] section.  The value can either be the full absolute path and file name of the file containing the cert, or the actual PEM cert data e.g.

[General]
CACertificate = /path/to/cacert.asc

or

[General]
CACertificate = -----BEGIN CERTIFICATE-----\
ASJAdf0987aasdfl....\
more lines here\
....

 

Thanks in advance,
Jovan Vukotic

 

Jovan Vukotić • Senior Software Engineer • Ambit Treasury Management • SunGard • Banking • Bulevar Milutina Milankovića 136b, Belgrade, Serbia • tel: +381.11.6555-66-1 • jovan.vukotic@xxxxxxxxxxx

 

Join the online conversation with SunGard’s customers, partners and Industry experts and find an event near you at: www.sungard.com/ten.

 




--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

 

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

[Index of Archives]     [Fedora User Discussion]     [Older Fedora Users]     [Fedora Announce]     [Fedora Package Announce]     [EPEL Announce]     [Fedora News]     [Fedora Cloud]     [Fedora Advisory Board]     [Fedora Education]     [Fedora Security]     [Fedora Scitech]     [Fedora Robotics]     [Fedora Maintainers]     [Fedora Infrastructure]     [Fedora Websites]     [Anaconda Devel]     [Fedora Devel Java]     [Fedora Legacy]     [Fedora Desktop]     [Fedora Fonts]     [ATA RAID]     [Fedora Marketing]     [Fedora Management Tools]     [Fedora Mentors]     [Fedora Package Review]     [Fedora R Devel]     [Fedora PHP Devel]     [Kickstart]     [Fedora Music]     [Fedora Packaging]     [Centos]     [Fedora SELinux]     [Fedora Legal]     [Fedora Kernel]     [Fedora QA]     [Fedora Triage]     [Fedora OCaml]     [Coolkey]     [Virtualization Tools]     [ET Management Tools]     [Yum Users]     [Tux]     [Yosemite News]     [Yosemite Photos]     [Linux Apps]     [Maemo Users]     [Gnome Users]     [KDE Users]     [Fedora Tools]     [Fedora Art]     [Fedora Docs]     [Maemo Users]     [Asterisk PBX]     [Fedora Sparc]     [Fedora Universal Network Connector]     [Fedora ARM]

  Powered by Linux