[Fedora-directory-users] Certutil procedure Incorrect & not addingCertificates to CA Certs?

[Rich Megginson]

Anthony Giggins wrote:
>> Rich Megginson wrote:
>>     
>>> Also
>>>
>>> The procedure creates 2 Server Certs and no CA Certs
>>>       
>> No, it does create a CA cert and a Server Cert.
>>     
>
> Yes it does create both but it is adding both the "CA certificate" &
> "Server-Cert" certificates only to the Server Certs Page Under Manage
> Certificates and nothing to the CA Certs under the same page. See
> attached images (if the mailing list allows this) which were added using
> the setupssl2.sh script but I also get the similar results when using
> the procedure above
>   
Hmm - looks like a bug.  But at any rate, it is still a CA cert despite 
what the console says, and will correctly function as a CA cert for all 
TLS/SSL operations.
>   
>>> can anyone please
>>> confirm the correct commands to add the certificates to the CA Certs
>>> rather then the Server Certs
>>>
>>>       
>> "add the certificates to the CA Certs"?
>>     
>
> Please see the attached images also I think the information for creating
> the CA certificate is missing from
> http://directory.fedoraproject.org/wiki/Howto:SSL I can only find
> instructions on adding the Server Certificate please correct me if I'm
> wrong
>   
I'm not sure why the CA cert is showing up under Server Certs in the 
console, but it is indeed a CA cert and will function as such for 
TLS/SSL operations.
>   
>>> I'm also getting issues when using the setupssl2.sh script (
>>> http://directory.fedoraproject.org/download/setupssl2.sh ) on the
>>>       
> wiki
>   
>>> (I am running version Fedora Directory Server 1.1 on Centos 5.1 from
>>>       
> the
>   
>>> Fedora 6 yum repositories using the procedure
>>> http://directory.fedoraproject.org/wiki/Download#Enterprise_Linux_5
>>>       
> )
>   
>> What issues are you getting?
>>     
>
> This is explained above hopefully in enough detail
>
> Regards,
>
> Anthony
>   
>
> ------------------------------------------------------------------------
>
>
> ------------------------------------------------------------------------
>
> ------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   

-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3245 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://listman.redhat.com/archives/fedora-directory-users/attachments/20080124/df948f9c/attachment.bin>