Re: SOLVED: NSPR "Certificate type not approved for application" error when a TLS-enabled proxy LDAP OpenLDAP server connects to Fedora Directory Server

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

To: aleksander.adamowski.fedora@xxxxxxxxx
Subject: Re: SOLVED: NSPR "Certificate type not approved for application" error when a TLS-enabled proxy LDAP OpenLDAP server connects to Fedora Directory Server
From: Michael Ströder <michael@xxxxxxxxxxxx>
Date: Tue, 15 Apr 2008 17:39:28 +0200
Cc: "General discussion list for the Fedora Directory server project." <fedora-directory-users@xxxxxxxxxx>
In-reply-to: <48049454.5030403@xxxxxxxxx>
References: <480326E7.5060607@xxxxxxxxx> <48037730.1070307@xxxxxxxxxx> <48038E31.5020708@xxxxxxxxx> <48039121.3090400@xxxxxxxxxx> <48039725.7050002@xxxxxxxxx> <4803D33B.40909@xxxxxxxxxxxx> <48049454.5030403@xxxxxxxxx>
Reply-to: "General discussion list for the Fedora Directory server project." <fedora-directory-users@xxxxxxxxxx>
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.13) Gecko/20080313 SeaMonkey/1.1.9

Aleksander Adamowski wrote:

Michael Ströder wrote:

Aleksander Adamowski wrote:


The relevant fields of the OpenLDAP server's certificate are:


What about the keyUsage and extendedKeyUsage extensions?

These aren't present, unfortunately.


IIRC they have to be defined.

Example lines for openssl.cnf:
keyUsage                = digitalSignature,keyEncipherment
extendedKeyUsage        = serverAuth

Ciao, Michael.

--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users

References:
- NSPR "Certificate type not approved for application" error when a TLS-enabled proxy LDAP OpenLDAP server connects to Fedora Directory Server
  - From: Aleksander Adamowski
- Re: NSPR "Certificate type not approved for application" error when a TLS-enabled proxy LDAP OpenLDAP server connects to Fedora Directory Server
  - From: Rich Megginson
- SOLVED: NSPR "Certificate type not approved for application" error when a TLS-enabled proxy LDAP OpenLDAP server connects to Fedora Directory Server
  - From: Aleksander Adamowski
- Re: SOLVED: NSPR "Certificate type not approved for application" error when a TLS-enabled proxy LDAP OpenLDAP server connects to Fedora Directory Server
  - From: Rich Megginson
- Re: SOLVED: NSPR "Certificate type not approved for application" error when a TLS-enabled proxy LDAP OpenLDAP server connects to Fedora Directory Server
  - From: Aleksander Adamowski
- Re: SOLVED: NSPR "Certificate type not approved for application" error when a TLS-enabled proxy LDAP OpenLDAP server connects to Fedora Directory Server
  - From: Michael Ströder
- Re: SOLVED: NSPR "Certificate type not approved for application" error when a TLS-enabled proxy LDAP OpenLDAP server connects to Fedora Directory Server
  - From: Aleksander Adamowski

Prev by Date: pam_ldap support dynamic groups
Next by Date: Removing a Smart Referral
Previous by thread: Re: SOLVED: NSPR "Certificate type not approved for application" error when a TLS-enabled proxy LDAP OpenLDAP server connects to Fedora Directory Server
Next by thread: Re: SOLVED: NSPR "Certificate type not approved for application" error when a TLS-enabled proxy LDAP OpenLDAP server connects to Fedora Directory Server
Index(es):
- Date
- Thread

[Index of Archives] [Fedora Directory Users] [Fedora Directory Devel] [Fedora Announce] [Fedora Legacy Announce] [Kernel] [Fedora Legacy] [Share Photos] [Fedora Desktop] [PAM] [Red Hat Watch] [Red Hat Development] [Big List of Linux Books] [Gimp] [Yosemite News]