Re: [389-users] How to use existing SSL cert?

[Date Prev][Date Next][Thread Prev][Thread Next][Date Index][Thread Index]

 



Sean Carolan wrote:
> They are standard x.509v3, RSA 1024 bit encrypted format.   Nothing
> exotic, they work fine on Apache web servers...
>   
You first need to put them in pkcs12 format.  Use the openssl pkcs12 to 
combine your existing server cert and private key into a pkcs12 file.

Then, use the pk12util to import your .p12 file into the directory server:

cd /etc/dirsrv/slapd-something
mv cert8.db cert8.db.save
mv key3.db key3.db.save
pk12util -i /path/to/your/file.p12 -d .

If you encrypted your .p12 file, you will have to give the decryption 
password.  If prompted for the NSS db password, I think you should be 
able to just hit Enter.
>   
>> What format is your existing private key/cert in?
>>     
>>> Thanks
>>>
>>> Sean
>>> --
>>> 389 users mailing list
>>> 389-users@xxxxxxxxxxxxxxxxxxxxxxx
>>> https://admin.fedoraproject.org/mailman/listinfo/389-users
>>>
>>>       
>> --
>> 389 users mailing list
>> 389-users@xxxxxxxxxxxxxxxxxxxxxxx
>> https://admin.fedoraproject.org/mailman/listinfo/389-users
>>
>>     
> --
> 389 users mailing list
> 389-users@xxxxxxxxxxxxxxxxxxxxxxx
> https://admin.fedoraproject.org/mailman/listinfo/389-users
>   

--
389 users mailing list
389-users@xxxxxxxxxxxxxxxxxxxxxxx
https://admin.fedoraproject.org/mailman/listinfo/389-users

[Index of Archives]     [Fedora Directory Users]     [Fedora Directory Devel]     [Fedora Announce]     [Fedora Legacy Announce]     [Kernel]     [Fedora Legacy]     [Share Photos]     [Fedora Desktop]     [PAM]     [Red Hat Watch]     [Red Hat Development]     [Big List of Linux Books]     [Gimp]     [Yosemite News]

  Powered by Linux