[Fedora-directory-users] SSL problem on replication!
Alex
magobin at gmail.com
Tue Mar 28 16:03:56 UTC 2006
> run it from /opt/fedora-ds/alias :
>
> #!/bin/sh
> ../shared/bin/certutil -N -d . -f pwdfile.txt
> ../shared/bin/certutil -G -d . -z noise.txt -f pwdfile.txt
> ../shared/bin/certutil -S -n "CA certificate" -s "cn=CAcert"
> -x -t "CT,," -m 1000 -v 120 -d . -z noise.txt -f pwdfile.txt
> ../shared/bin/certutil -S -n "Server-Cert" -s
> "cn=server-cert" -c "CA certificate" -t "u,u,u" -m
> 1001 -v 120 -d . -z noise.txt -f pwdfile.txt echo moving key..
>
> mv key3.db slapd-node1-key3.db
> mv cert8.db slapd-node1-cert8.db
> ln -s slapd-node1-key3.db key3.db
> ln -s slapd-node1-cert8.db cert8.db
> echo pk..
> ../shared/bin/pk12util -d . -P slapd-node1- -o servercert.pfx
> -n Server-Cert
>
> (replace node1 with your hostname)
Ciao Susan....I did 3(!!!) fresh installation and the script above is
exactly what I did today...only I replace "cn=Server-Cert" with my fqdn,
according with documentation...after that I export .asc to second server
(nodo2) as doc says...so, in this way in nodo1, where I run the script above
I can see certificate in Server CA under console/manage Certificate; in
nodo2, after :
../shared/bin/certutil -A -d . -P slapd-nodo2- -n "CA certificate" -t "CT,,"
-a -i cacert.asc
I can see in console/manage certificate...only in CA certs and not in Server
certs..so in nodo2 I'm not able to use certificate for use ssl encryption.
> btw, I had to use different noise/password files for each server's cert.
Not sure why, perhaps something else I was doing wrong...
Uhm...what does it mean?....you run script in each server?
Regards
Alex
More information about the Fedora-directory-users
mailing list