[Fedora-directory-users] SSL

[Rich Megginson]

certutil -L -d /etc/dirsrv/slapd-instance
certutil -L -d /etc/dirsrv/admin-serv

Anand Vaddarapu wrote:
> Hi,
>  
> ls -al ~/.fedora-idm-console/
> total 12
> drwxr-xr-x  2 root root 4096 Feb 26 08:46 .
> drwxr-x--- 12 root root 4096 Mar 26 16:10 ..
>
>
> certutil -L -d ~/.fedora-idm-console/
> certutil: function failed: security library: bad database.
>
> Thanks
>
>
>
>
> On Tue, Apr 1, 2008 at 4:57 AM, Rich Megginson <rmeggins at redhat.com 
> <mailto:rmeggins at redhat.com>> wrote:
>
>     Anand Vaddarapu wrote:
>     > Hi,
>     >
>     > After enabling SSL with console using the procedure
>     >
>     _http://directory.fedoraproject.org/wiki/Howto:SSL#Console_SSL_Information_
>     > i am getting these following error messages when i am trying to
>     login
>     > into directory server in the console. SSL is enabled in both the
>     admin
>     > console & the Ldap server
>     >
>     > From logs:
>     >  [27/Mar/2008:14:56:24 +1100] conn=47 fd=66 slot=66 SSL connection
>     > from 10.50.5.81 <http://10.50.5.81> <http://10.50.5.81> to
>     10.50.1.24 <http://10.50.1.24> <http://10.50.1.24>
>     > [27/Mar/2008:14:56:24 +1100] conn=47 op=-1 fd=66 closed - SSL peer
>     > cannot verify your certificate.
>     ls -al ~/.fedora-idm-console
>     certutil -L -d ~/.fedora-idm-console
>     >
>     > we are these when starting the Ldap server
>     >
>     > 27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to unwrap
>     > key for cipher AES
>     > [27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for cipher AES
>     > in attrcrypt_cipher_init
>     > [27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher AES in
>     > attrcrypt_init
>     > [27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to
>     unwrap
>     > key for cipher AES
>     > [27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for cipher AES
>     > in attrcrypt_cipher_init
>     > [27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher AES in
>     > attrcrypt_init
>     > [27/Mar/2008:14:45:05 +1100] - slapd started.  Listening on All
>     > Interfaces port 389 for LDAP requests
>     > [27/Mar/2008:14:45:05 +1100] - Listening on All Interfaces port 636
>     > for LDAPS requests
>     >
>     >
>     >
>     > Console error message:
>     >
>     > netscape.ldap.LDAPException:JSSSocketFactory.makeSocket
>     > devil.wcg.net.au:636 <http://devil.wcg.net.au:636>
>     <http://devil.wcg.net.au:636>, SSL_ForceHandshake
>     > failed: (-8054) unknown error (91)
>     >
>     > Help Appreciated.
>     >
>     > Thanks
>     >
>     >
>     >
>     >
>     >
>     >
>     >
>     ------------------------------------------------------------------------
>     >
>     > --
>     > Fedora-directory-users mailing list
>     > Fedora-directory-users at redhat.com
>     <mailto:Fedora-directory-users at redhat.com>
>     > https://www.redhat.com/mailman/listinfo/fedora-directory-users
>     >
>
>
>     --
>     Fedora-directory-users mailing list
>     Fedora-directory-users at redhat.com
>     <mailto:Fedora-directory-users at redhat.com>
>     https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>
> ------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20080401/0fee8d3e/attachment.bin>