McManus, Thomas wrote:
I've been trying for the last 2 days to setup SSL on FDS without any luck and little feedback. Following the Redhat Directory Server 8.0 Administration Guide, Chapter 11, I've tried to install a local certificate both through the console and at the command line using certutil.
What platform? What version of fedora ds? rpm -qi fedora-ds-base
This is a known console problem - try omitting the double quotes - you should not need themFrom the console going through every step. In step 2 the DN is:CN="ldap1.chip.org", OU="CHIP", O="Childrens Hospital Boston", L="Boston", ST="Massachusetts", C="US"In step 3 I get: Unable to convert DN to certificate name.
Why are you specifying -P? You should not need to do that anymore. Where in the instructions does it say to do that?Using the certutil these commands worked:certutil -N -d . -f pwdfile -P slapd-ldap1 certutil -S -n "CA certificate" -s "cn=Childrens Hospital Informatics Program, dc=chip, dc=org" -x -t "CT,," -m 1000 -v 120 -d . -k rsa -g 1024 -f pwdfile -P slapd-ldap1 certutil -S -n "Server-Cert" -s "cn=ldap1.chip.org,cn=DS1" -c "CA certificate" -t "u,u,u" -m 1001 -v 120 -d . -k rsa -g 1024 -f ./pwdfile -P slapd-ldap1 certutil -d . -L -n "CA certificate" -a > cacert.asc -P slapd-ldap1
Using the pk12util failedpk12util -d . -o ldap1.p12 -n Server-Cert1 -w ./pwdfile.txt -k ./pwdfile.txt The error is: pk12util: find user certs from nickname failed: security library: bad database.
You are missing the -P
I've run these 2 programs multiple times and googled to no avail. Could anyone help with this?Tom McManus System Manager II Research Computing Children’s Hospital Boston 300 Longfellow Ave., Enders 146.1 Boston MA 02115 Office: 617 919 2308 Mobile: 617 997 2665 ------------------------------------------------------------------------ -- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users
<<attachment: smime.p7s>>
-- Fedora-directory-users mailing list Fedora-directory-users@xxxxxxxxxx https://www.redhat.com/mailman/listinfo/fedora-directory-users
