[Fedora-directory-users] Enabling SSL

[Adam Stokes]

dn: cn=encryption,cn=config
objectClass: top
objectClass: nsEncryptionConfig
cn: encryption
nsSSLSessionTimeout: 0
nsSSLClientAuth: allowed
nsSSL2: off
nsSSL3: on
creatorsName: cn=server,cn=plugins,cn=config
modifiersName: cn=directory manager
createTimestamp: 20050701182744Z
modifyTimestamp: 20050720192820Z
nsSSL3Ciphers:
-rsa_null_md5,rsa_rc4_128_md5,rsa_rc4_40_md5,rsa_rc2_40_md5,rsa_des_sha,rsa_fips_des_sha,rsa_3des_sha,rsa_fips_3des_sha,fortezza,fortezza_rc4_128_sha,fortezza_null,tls_rsa_export1024_with_rc4_56_sha,tls_rsa_export1024_with_des_cbc_sha
nsKeyfile: alias/slapd-directory-key3.db
nsCertfile: alias/slapd-directory-cert8.db
numSubordinates: 1

Above is my entry for reference

On Wed, 2005-08-03 at 13:57 -0400, Kevin Kovach wrote:
> Thanks Nathan.  I've made this change and again got farther than I have before.
> 
> FYI, I got that cipher list from the Wiki.  That will need to be
> updated to contain the complete list.
> 
> Although I got farther the server is still not starting up.  Now it's
> complaining that none of the ciphers are valid?  How to I ensure that
> I'm using a valid cypher?  Here's the error I'm seeing in the error
> log ...
> 
> [03/Aug/2005:13:56:23 -0400] - Fedora-Directory/7.1 B2005.201.2115 starting up
> [03/Aug/2005:13:56:23 -0400] - SSL failure: None of the cipher are valid
> 
> Thanks again for the help.
> 
> - Kevin
> 
> And again have a different issue now.  Now it's complaining that there are no