[Fedora-directory-users] FDS console on Windows with SSL and self-signed certificates

[Richard Megginson]

Brian Rudy wrote:

> Thanks George,
>
> This is indeed the location of cert7.db and key3.db. I was able to get 
> it working by importing the self-signed certificate with pk12util. 
> (ex. pk12util -i servercert.pfx -d C:\Documents and 
> Settings\<username>\.mcc)
>
> This might be sufficiently useful for inclusion in the Wiki.

Added to http://directory.fedora.redhat.com/wiki/Howto:WindowsConsole#SSL

>
>
>
> George Holbert wrote:
>
>> Hi Brian,
>> When running the console on Unix, these files are created under 
>> $HOME/.mcc.
>>
>> ls -l ~/.mcc
>> total 178
>> -rw-r--r--   1 root     other        226 Jan 12 14:27 
>> Console.4.0.Login.preferences
>> -rw-------   1 root     other      65536 Aug 16 18:32 cert8.db
>> -rw-------   1 root     other      32768 Aug 16 18:32 key3.db
>> -rw-------   1 root     other      32768 Aug 16 18:32 secmod.db
>>
>> I'm not sure where this stuff would be created on Windows, but might 
>> be under C:\Documents and Settings\<username>\.mcc ?  Just a guess.
>>
>> -- George
>>
>>
>> Brian Rudy wrote:
>>
>>> <snip>
>>> Since I am using a self-signed certificate on the directory server, 
>>> which would require installation on the client, this all appears to 
>>> make sense. Now for the question: How does one install certificates 
>>> on the client when using JSS/NSPR/NSS as shown in the Wiki? It looks 
>>> like you would need to create your own cert7.db and key3.db with 
>>> certutil, and import the Server-Cert, but I'm a bit confused as to 
>>> where the .db files should be located, and what they should be named.
>>>
>>> Has anyone done this who wouldn't mind sharing?
>>
>
> -- 
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3178 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20060127/1a0bb51e/attachment.bin>