Re: FDS console on Windows with SSL and self-signed certificates

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Thanks George,

This is indeed the location of cert7.db and key3.db. I was able to get it working by importing the self-signed certificate with pk12util. (ex. pk12util -i servercert.pfx -d C:\Documents and Settings\<username>\.mcc)

This might be sufficiently useful for inclusion in the Wiki.



George Holbert wrote:
Hi Brian,
When running the console on Unix, these files are created under $HOME/.mcc.

ls -l ~/.mcc
total 178
-rw-r--r-- 1 root other 226 Jan 12 14:27 Console.4.0.Login.preferences
-rw-------   1 root     other      65536 Aug 16 18:32 cert8.db
-rw-------   1 root     other      32768 Aug 16 18:32 key3.db
-rw-------   1 root     other      32768 Aug 16 18:32 secmod.db

I'm not sure where this stuff would be created on Windows, but might be under C:\Documents and Settings\<username>\.mcc ? Just a guess.

-- George


Brian Rudy wrote:
<snip>
Since I am using a self-signed certificate on the directory server, which would require installation on the client, this all appears to make sense. Now for the question: How does one install certificates on the client when using JSS/NSPR/NSS as shown in the Wiki? It looks like you would need to create your own cert7.db and key3.db with certutil, and import the Server-Cert, but I'm a bit confused as to where the .db files should be located, and what they should be named.

Has anyone done this who wouldn't mind sharing?

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Index of Archives]     [Fedora Directory Users]     [Fedora Directory Devel]     [Fedora Announce]     [Fedora Legacy Announce]     [Kernel]     [Fedora Legacy]     [Share Photos]     [Fedora Desktop]     [PAM]     [Red Hat Watch]     [Red Hat Development]     [Big List of Linux Books]     [Gimp]     [Yosemite News]

  Powered by Linux