[Fedora-directory-users] SSL problem on replication!

[Alex aka Magobin]

I still have problem with ssl replication...in order to resolv this
problem I post my steps to configure it..thanks in advance if someone
could help me..:

1)in alias directory I make pwdfile.txt and noise .txt

2) Make a .db file:

../shared/bin/certutil -N -d . -f pwdfile.txt

3) Make an encrypted key:

../shared/bin/certutil -G -d . -z noise.txt -f pwdfile.txt

4) Make an mysel certificate:

../shared/bin/certutil -S -n "CA certificate" -s "cn=CAcert" -x -t
"CT,," -m 1000 -v 120 -d . -z noise.txt -f pwdfile.txt

5) make a CA server

../shared/bin/certutil -S -n "Server-Cert" -s "cn=domain.example.com" -c
"CA certificate" -t "u,u,u" -m 1001 -v 120 -d . -z noise.txt -f
pwdfile.txt

6) Rename db and relink:

mv cert8.db slapd-server-cert8.db
mv key3.db slapd-server-key3.db
ln -s slapd-server-cert8.db cert8.db
ln -s slapd-server-key3.db key3.db

chown nobody *.db

7) Esporting certificate:

../shared/bin/certutil -L -d . -n "CA Certificate" -a > nodo1.cert.asc

8) Send to nodo2

scp nodo1.cert.asc root at nodo2:/opt/fedora-ds/alias/

9)Importing in db:

../shared/bin/certutil -A -d . -P slapd-nodo2- -n "CA Certificate" -t
"CT,," -a -i nodo1.cert.asc

10) make a replication with mmr.pl script

./mmr.pl --host1 nodo1.domain.example.com --host2
nodo2.domain.example.com --host_id 1 --host_id 2 --bindpw secretpwd
--repmanpw secret --create --with-ssl

11) After that....should be a replication...but if in slapd log I find:

NSMMReplicationPlugin - agmt=cn"Replication to
nodo2.domain.example.com"" (nodo2:636): SSL Not Initialized, Replication
over SSL FAILED

NSMMReplicationPlugin - agmt=cn"Replication to
nodo2.domain.example.com"" (nodo2:636):incremental update failed and
requires administrator action

Any help is greetly apreciated!
Alex