Re: SSL

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



certutil -L -d /etc/dirsrv/slapd-instance
certutil -L -d /etc/dirsrv/admin-serv

Anand Vaddarapu wrote:
Hi,
ls -al ~/.fedora-idm-console/
total 12
drwxr-xr-x  2 root root 4096 Feb 26 08:46 .
drwxr-x--- 12 root root 4096 Mar 26 16:10 ..


certutil -L -d ~/.fedora-idm-console/
certutil: function failed: security library: bad database.

Thanks




On Tue, Apr 1, 2008 at 4:57 AM, Rich Megginson <rmeggins@xxxxxxxxxx <mailto:rmeggins@xxxxxxxxxx>> wrote:

    Anand Vaddarapu wrote:
    > Hi,
    >
    > After enabling SSL with console using the procedure
    >
    _http://directory.fedoraproject.org/wiki/Howto:SSL#Console_SSL_Information_
    > i am getting these following error messages when i am trying to
    login
    > into directory server in the console. SSL is enabled in both the
    admin
    > console & the Ldap server
    >
    > From logs:
    >  [27/Mar/2008:14:56:24 +1100] conn=47 fd=66 slot=66 SSL connection
    > from 10.50.5.81 <http://10.50.5.81> <http://10.50.5.81> to
    10.50.1.24 <http://10.50.1.24> <http://10.50.1.24>
    > [27/Mar/2008:14:56:24 +1100] conn=47 op=-1 fd=66 closed - SSL peer
    > cannot verify your certificate.
    ls -al ~/.fedora-idm-console
    certutil -L -d ~/.fedora-idm-console
    >
    > we are these when starting the Ldap server
    >
    > 27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to unwrap
    > key for cipher AES
    > [27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for cipher AES
    > in attrcrypt_cipher_init
    > [27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher AES in
    > attrcrypt_init
    > [27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to
    unwrap
    > key for cipher AES
    > [27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for cipher AES
    > in attrcrypt_cipher_init
    > [27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher AES in
    > attrcrypt_init
    > [27/Mar/2008:14:45:05 +1100] - slapd started.  Listening on All
    > Interfaces port 389 for LDAP requests
    > [27/Mar/2008:14:45:05 +1100] - Listening on All Interfaces port 636
    > for LDAPS requests
    >
    >
    >
    > Console error message:
    >
    > netscape.ldap.LDAPException:JSSSocketFactory.makeSocket
    > devil.wcg.net.au:636 <http://devil.wcg.net.au:636>
    <http://devil.wcg.net.au:636>, SSL_ForceHandshake
    > failed: (-8054) unknown error (91)
    >
    > Help Appreciated.
    >
    > Thanks
    >
    >
    >
    >
    >
    >
    >
    ------------------------------------------------------------------------
    >
    > --
    > Fedora-directory-users mailing list
    > Fedora-directory-users@xxxxxxxxxx
    <mailto:Fedora-directory-users@xxxxxxxxxx>
    > https://www.redhat.com/mailman/listinfo/fedora-directory-users
    >


    --
    Fedora-directory-users mailing list
    Fedora-directory-users@xxxxxxxxxx
    <mailto:Fedora-directory-users@xxxxxxxxxx>
    https://www.redhat.com/mailman/listinfo/fedora-directory-users


------------------------------------------------------------------------

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users

<<attachment: smime.p7s>>

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users

[Index of Archives]     [Fedora Directory Users]     [Fedora Directory Devel]     [Fedora Announce]     [Fedora Legacy Announce]     [Kernel]     [Fedora Legacy]     [Share Photos]     [Fedora Desktop]     [PAM]     [Red Hat Watch]     [Red Hat Development]     [Big List of Linux Books]     [Gimp]     [Yosemite News]

  Powered by Linux