Hie<br><br><div class="gmail_quote">On Sat, Jul 28, 2012 at 5:15 PM, fosiul alam <span dir="ltr"><<a href="mailto:expertalert@gmail.com" target="_blank">expertalert@gmail.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
Hi<br>
thanks I understand i will have to start from scratch for certificate<br>
.. but few explanation i need<br>
<br>
My ldapserver host name is : ldap-2.fosiul.lan<br>
and I just cn="Directory Manager"<br>
<br></blockquote><div><br>Try below.<br><pre># certutil -S -n "directory-Server-Cert" -s "cn=ldap-2.fosiul.lan" -c "CA certificate" -t "u,u,u" -m 1001 -v 720 -d . -k rsa</pre><br> </div>
<blockquote class="gmail_quote" style="margin:0pt 0pt 0pt 0.8ex;border-left:1px solid rgb(204,204,204);padding-left:1ex">
so according to those info.. what shall i put in ,<br>
dc=directory ???<br>
and<br>
cn=<a href="http://directory.example.com" target="_blank">directory.example.com</a>" ???<br>
<br>
My server hostname or "Directory Manager"<br>
<br>
# certutil -S -n "CA certificate" -s "cn=CA<br>
cert,dc=directory,dc=example,dc=com" -2 -x -t "CT,," -m 1000 -v 720 -d . -k<br>
rsa<br>
<br>
Make sure you say yes to "Is this a CA certificate [y/N]?" and everything<br>
else will be default.<br>
<br>
Next we create your server cert. Make sure your cn is your FQDN of this<br>
server.<br>
<br>
# certutil -S -n "directory-Server-Cert" -s "cn=<a href="http://directory.example.com" target="_blank">directory.example.com</a>" -c<br>
"CA certificate" -t "u,u,u" -m 1001 -v 720 -d . -k rsa<br>
<br>
Thanks for your help .<br>
Really appreciate ..<br>
--<br>
389 users mailing list<br>
<a href="mailto:389-users@lists.fedoraproject.org">389-users@lists.fedoraproject.org</a><br>
<a href="https://admin.fedoraproject.org/mailman/listinfo/389-users" target="_blank">https://admin.fedoraproject.org/mailman/listinfo/389-users</a></blockquote></div><br>Regards<br>Arpit Tolani<br>