<div class="gmail_quote">2011/10/19 Chris Cawley <span dir="ltr"><<a href="mailto:cawley@wrlc.org">cawley@wrlc.org</a>></span><br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;">
<div bgcolor="white" lang="EN-US" link="blue" vlink="purple"><div><p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">Went back to the docs again and this resolved that issue:<u></u><u></u></span></p><p class="MsoNormal">
<span style="font-size:11.0pt;color:#1F497D">certutil -A -i /var/tmp/wrlc.org.crt -t "u,u,u" -d /etc/dirsrv/slapd-ldap -n "server-cert"<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><u></u> <u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">However, I now get this error:<u></u><u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">[19/Oct/2011:10:34:36 -0400] - SSL alert: CERT_VerifyCertificateNow: verify certificate failed for cert server-cert of family cn=RSA,cn=encryption,cn=config (Netscape Portable Runtime error -8179 - Peer's Certificate issuer is not recognized.)<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><u></u> <u></u></span></p><p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D">I am guessing that there are other certutil commands?<u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;color:#1F497D"><u></u> </span></p></div></div></blockquote><div><br></div><div>There was some work done the create a man page for certutil and friends. Until such time have a look at </div>
<div><a href="http://www.mozilla.org/projects/security/pki/nss/tools/certutil.html">http://www.mozilla.org/projects/security/pki/nss/tools/certutil.html</a></div><div><br></div><div>Regards</div></div>-- <br>Gerhardus Geldenhuis<br>