[Fedora-directory-users] self-signed certificates

[Nathan Kinder]

Dan Lipsitt wrote:

>It appears that the setup utility now creates self-signed certificates
>in the alias directory, making the certutil instructions moot. Is that
>correct? My alias directory contains the following files:
>  
>
No, that's not correct.  See below.

>------
>$ cd /opt/fedora-ds/alias/
>$ ls -la
>total 420
>drwxr-xr-x   2 nobody nobody   4096 Feb 21 17:16 .
>drwxr-xr-x  15 root   root     4096 Feb 21 16:57 ..
>-rw-------   1 nobody nobody  65536 Feb 21 17:16 admin-serv-roam104-178-cert8.db
>-rw-------   1 nobody nobody  16384 Feb 21 17:16 admin-serv-roam104-178-key3.db
>-rwxr-xr-x   1 root   nobody 196340 Dec  8 11:04 libnssckbi.so
>-rw-------   1 nobody nobody  16384 Feb 21 16:57 secmod.db
>-rw-------   1 nobody nobody  65536 Feb 21 16:57 slapd-roam104-178-cert8.db
>-rw-------   1 nobody nobody  16384 Feb 21 16:57 slapd-roam104-178-key3.db
>------
>
>I didn't create any of these files myself.
>
>My problem is that no certificate shows up in the drop-down menu under
>Encryption in the Admin Server console.
>
>As you can see, my hostname has a dash in it. Could that be causing
>problems? Or do I need to use certutil manually?
>  
>
You still need to use certutil to create your certs.  Those are empty 
database files.

-NGK

>Thanks,
>Dan
>
>--
>Fedora-directory-users mailing list
>Fedora-directory-users at redhat.com
>https://www.redhat.com/mailman/listinfo/fedora-directory-users
>  
>