[Fedora-directory-users] SSL problem on replication!

[Susan]

--- Alex <magobin at gmail.com> wrote:
>   
> > of course!
> > 
> > each server will have its own certificate.  OK, you have 
> > servers A & B.  
> > 
> 
> Answer to richard too...
> 
> Ok, i tried..on my virtual....I run all command as you know..both in nodo1
> and nodo2...
> Now..both have ssl enabled....but if I try to import CA certificate from
> nodo1 to nodo2 :
> 
> ../shared/bin/certutil -A -d . -P slapd-nodo2- -n "CA certificate" -t "CT,,"
> -a -i cacert.asc
> 
> It says:
> 
> Certutil-bin: could not obtain certificate from file: You are attempting to
> import a cert with the same issuer/serial as an existing cert, but that is
> not the same cert


yea, that's what I was saying earlier.  I think the problem is that identical
scripts/noise/password files produce identical certs, I think.  I had to change both noise &
password on the 2nd server to produce a 2nd server cert which I could then import into the server
A DB.

__________________________________________________
Do You Yahoo!?
Tired of spam?  Yahoo! Mail has the best spam protection around 
http://mail.yahoo.com