[Fedora-directory-users] problem with ssl

[Richard Megginson]

basile au siris wrote:

> hi
> i try to enable ssl with redhat documentation  i use certutil to 
> generate certificate
> i store in /opt/fedora-ds/slapd_myserver/alias
> but when in the console i check enable ssl and use cipher family rsa
> i don t see my certificate
> i use wiki fedora and do what they say but with same result
> i have attribute nscertfile and nscertfile in cn=encryption,cn=config 
> with
> path to slapd-myserver-cert8.db and slapd-myserver-key3.db
> what do i forget to do ?

/opt/fedora-ds/alias should have two files for your server - 
slapd-myserver-key3.db and slapd-myserver-cert8.db.  When you use 
certutil or it's related tools, there are two command line arguments 
which are really key - -P and -d.  The argument for -P should be 
"slapd-myserver-".  Notice the "-" at the end.  If you do not specify 
this "-" at the end, you will not get your desired results.  The 
argument for -d should always be /opt/fedora-ds/alias - this directory 
is (for historical reasons) the directory in to which all of the crypto 
files go.

> thanks
> basile
>
> -- 
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3312 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20051115/92066cbd/attachment.bin>