[Fedora-directory-users] SSL

[Anand Vaddarapu]

Hi,


     #certutil -L -d /etc/dirsrv/slapd-instance
     CA certificate                                               CTu,u,u
     server-cert                                                   u,u,u
     Server-Cert                                                  u,u,u


      #certutil -L -d /etc/dirsrv/admin-serv

      CA certificate                                               CTu,u,u
      server-cert                                                   u,u,u
      Server-Cert                                                  u,u,u

Thanks



On Wed, Apr 2, 2008 at 6:38 AM, Rich Megginson <rmeggins at redhat.com> wrote:

> certutil -L -d /etc/dirsrv/slapd-instance
> certutil -L -d /etc/dirsrv/admin-serv
>
> Anand Vaddarapu wrote:
> > Hi,
> >
> > ls -al ~/.fedora-idm-console/
> > total 12
> > drwxr-xr-x  2 root root 4096 Feb 26 08:46 .
> > drwxr-x--- 12 root root 4096 Mar 26 16:10 ..
> >
> >
> > certutil -L -d ~/.fedora-idm-console/
> > certutil: function failed: security library: bad database.
> >
> > Thanks
> >
> >
> >
> >
> > On Tue, Apr 1, 2008 at 4:57 AM, Rich Megginson <rmeggins at redhat.com
> > <mailto:rmeggins at redhat.com>> wrote:
> >
> >     Anand Vaddarapu wrote:
> >     > Hi,
> >     >
> >     > After enabling SSL with console using the procedure
> >     >
> >
> _http://directory.fedoraproject.org/wiki/Howto:SSL#Console_SSL_Information_
> >     > i am getting these following error messages when i am trying to
> >     login
> >     > into directory server in the console. SSL is enabled in both the
> >     admin
> >     > console & the Ldap server
> >     >
> >     > From logs:
> >     >  [27/Mar/2008:14:56:24 +1100] conn=47 fd=66 slot=66 SSL connection
> >     > from 10.50.5.81 <http://10.50.5.81> <http://10.50.5.81> to
> >     10.50.1.24 <http://10.50.1.24> <http://10.50.1.24>
> >     > [27/Mar/2008:14:56:24 +1100] conn=47 op=-1 fd=66 closed - SSL peer
> >     > cannot verify your certificate.
> >     ls -al ~/.fedora-idm-console
> >     certutil -L -d ~/.fedora-idm-console
> >     >
> >     > we are these when starting the Ldap server
> >     >
> >     > 27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to
> unwrap
> >     > key for cipher AES
> >     > [27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for cipher
> AES
> >     > in attrcrypt_cipher_init
> >     > [27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher AES in
> >     > attrcrypt_init
> >     > [27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to
> >     unwrap
> >     > key for cipher AES
> >     > [27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for cipher
> AES
> >     > in attrcrypt_cipher_init
> >     > [27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher AES in
> >     > attrcrypt_init
> >     > [27/Mar/2008:14:45:05 +1100] - slapd started.  Listening on All
> >     > Interfaces port 389 for LDAP requests
> >     > [27/Mar/2008:14:45:05 +1100] - Listening on All Interfaces port
> 636
> >     > for LDAPS requests
> >     >
> >     >
> >     >
> >     > Console error message:
> >     >
> >     > netscape.ldap.LDAPException:JSSSocketFactory.makeSocket
> >     > devil.wcg.net.au:636 <http://devil.wcg.net.au:636>
> >     <http://devil.wcg.net.au:636>, SSL_ForceHandshake
> >     > failed: (-8054) unknown error (91)
> >     >
> >     > Help Appreciated.
> >     >
> >     > Thanks
> >     >
> >     >
> >     >
> >     >
> >     >
> >     >
> >     >
> >
> ------------------------------------------------------------------------
> >     >
> >     > --
> >     > Fedora-directory-users mailing list
> >     > Fedora-directory-users at redhat.com
> >     <mailto:Fedora-directory-users at redhat.com>
> >     > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >     >
> >
> >
> >     --
> >     Fedora-directory-users mailing list
> >     Fedora-directory-users at redhat.com
> >     <mailto:Fedora-directory-users at redhat.com>
> >     https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
> >
> > ------------------------------------------------------------------------
> >
> > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users at redhat.com
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
>
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20080402/8fe89d68/attachment.htm>