[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

Re: [Fedora-directory-users] While re-craeting a SSL certificate I get this error



Steven Jones wrote:
Hi,

A while back I started the get FDS up and going and it appears I made a
mistake in the server generation file for the SSl certs, basically I did
this,

../shared/bin/certutil -S -n "Server-Cert" -s \
"cn=vuw.ac.nz" -c "CA certificate" -t "u,u,u" -m 1001 -v \
120 -d . -z noise.txt -f pwdfile.txt

When I should have done this,

../shared/bin/certutil -S -n "Server-Cert" -s \
"cn=vuwunicvfdsm001.vuw.ac.nz" -c "CA certificate" -t "u,u,u" -m 1001 -v
\
120 -d . -z noise.txt -f pwdfile.txt

So now I am working back through my notes to fix my mistake but at this
command,

../shared/bin/certutil -A -d . -P admin-serv-vuwunicvfdsm001- -n "CA
certificate" -t "CT,," -a -i cacert.asc

I get this error,

========
certutil-bin: could not obtain certificate from file: You are attempting
to import a cert with the same issuer/serial as an existing cert, but
that is not the same cert.
[root vuwunicvfdsm001 alias]#
========

How do I fix this please?
You need to remove the old CA cert first.

../shared/bin/certutil -D -d . -P admin-serv-vuwunicvfdsm001- -n "CA
certificate"

Then import the new CA cert.


regards

Steven Jones
Senior  Linux/Unix/San/Vmware System Administrator
APG -Technology Integration Team
Victoria University of Wellington
Phone: +64 4 463 6272


--
Fedora-directory-users mailing list
Fedora-directory-users redhat com
https://www.redhat.com/mailman/listinfo/fedora-directory-users

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]