[Fedora-directory-users] Directory Server and SSL

uffe at loop.to uffe at loop.to
Wed Nov 9 02:30:02 UTC 2005


Hello Wilmer.  If I understand correctly, you created a certificate and
it doesn't show up in the encryption configuration in the Admin Server
Console.  Enabling SSL here will allow your Console to use https against
your Admin Server, and your AS can use ldaps against your FDS (if FDS
has SSL enabled).

In this case the certificate should be added to
admin-serv-{hostname}-cert8.db, because AS keeps a separate certificate
database from FDS.

You can get a list of the certificates in the certificate database:
# cd /opt/fedora-ds/shared/bin
# ./certutil -L -d ../../alias -P admin-serv-example-

Make sure the trailing slash is there for the -P argument.

Wilmer Jaramillo wrote:

> Greetings,
>I have followed the instructions in the documentation of Red
>Hat(http://www.redhat.com/docs/manuals/dir-server/ag/7.1/ssl.html ),
>nevertheless, late to generate certificates CA for the Directory
>Server being listened in port 636 with SSL profit not to activate them
>for the Administrator Server(https), by some reason the list does not
>appear to me in (Server Group>Administrator
>  
>
>>Server>Open>Configuration>Encryption>Certificate)
>>    
>>
>
> Thanks.
>
>--
>Wilmer Jaramillo M.
>San Cristóbal - Venezuela
>TALUG - http://www.linuxtachira.org
>Linux User: 278.161 -- irc.freenode.net #talug
>GPG Key Fingerprint = 0666 D0D3 24CE 8935 9C24 BBF1 87DD BEA2 A4B2 1E8A
>
>--
>Fedora-directory-users mailing list
>Fedora-directory-users at redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  
>




More information about the Fedora-directory-users mailing list