Richard Megginson wrote:
Michał Droździewicz wrote:NSS always requires a password in order to unlock your server key. See the shell script at http://directory.fedora.redhat.com/wiki/Howto:SSL#Script for an example of how to create a password file.Hello,I know how to generate certs with passwords, but this results in password prompt at server startup and reboot. Is there a way to generate SSL certificate without password?
Actually, a password isn't required by NSS. To change an existing database to a NULL password use the modutil command. Its syntax is slightly different from the other NSS utilities but it has a decent help output if you don't get it quite right.
To change an existing database to be a blank password:% modutil -dbdir /opt/fedora-ds/alias -dbprefix slapd-foo- -changepw "NSS Certificate DB"
Enter the old password then press Enter twice for the new password to blank it out.
To generate a new database with a blank password with certutil do something like:
% certutil -N -d /opt/fedora-ds/alias -P slapd-foo- Press Enter twice. rob
Attachment:
smime.p7s
Description: S/MIME Cryptographic Signature
-- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users
