Re: simple ssl replication

[Richard Megginson <rmeggins@xxxxxxxxxx>]

Susan wrote:

> --- Richard Megginson <rmeggins@xxxxxxxxxx> wrote:
> susan:
>  
>
> > > "CT,," -a -i cnjldap01.cert.asc 
> > > certutil: could not obtain certificate from file: You are attempting to import a cert with the
> > > same issuer/serial as an existing cert, but that is not the same cert.
> > >
> > > What do you think?  Both the supplier's and the consumer's CA certs were created with identical
> > > password/noise files.  Is that a problem?
> > >
> > >
> > >      
> > It seems that you already have the CA cert in the consumer cert db.
> >    
>
>
> well, I recreated the cert DB on the supplier and the consumer, using different passwords and
> noise files and it worked fine after that.  I guess identical passwords/noise produce identical
> certs and that's not allowed.
No, that should be ok - are you sure you gave each cert a unique serial 
number?

> Anyway.. now I know.  Thank you for the export/import cert db
> explanation.  Perhaps that could go into the SSL wiki?
>  
Yes.

> __________________________________________________
> Do You Yahoo!?
> Tired of spam?  Yahoo! Mail has the best spam protection around 
> http://mail.yahoo.com 
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@xxxxxxxxxx
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users