Susan wrote:
--- Richard Megginson <rmeggins(a)redhat.com> wrote:
susan:
>>"CT,," -a -i cnjldap01.cert.asc
>>certutil: could not obtain certificate from file: You are attempting to import a
cert with the
>>same issuer/serial as an existing cert, but that is not the same cert.
>>
>>What do you think? Both the supplier's and the consumer's CA certs were
created with identical
>>password/noise files. Is that a problem?
>>
>>
>>
>>
>It seems that you already have the CA cert in the consumer cert db.
>
>
well, I recreated the cert DB on the supplier and the consumer, using different passwords
and
noise files and it worked fine after that. I guess identical passwords/noise produce
identical
certs and that's not allowed.
No, that should be ok - are you sure you gave each cert a unique serial
number?
Anyway.. now I know. Thank you for the export/import cert db
explanation. Perhaps that could go into the SSL wiki?
Yes.
__________________________________________________
Do You Yahoo!?
Tired of spam? Yahoo! Mail has the best spam protection around
http://mail.yahoo.com
--
Fedora-directory-users mailing list
Fedora-directory-users(a)redhat.com
https://www.redhat.com/mailman/listinfo/fedora-directory-users