hi,
I'm still evaluating some options to securize dynamic nodes and I have some questions
regarding certutil and nss databases:
Can I create NSS databases on any directory/server and then move files to
"/etc/dirsrv/slapd-instance_name" ?
If cert8.db and key3.db files are found in that directory are they used automatically by
slapd process on reboot?
If both answers are affirmative I'll try to script it and hook it within my node
creation flow.
is there any other detail I should take care of with this approach?
thanks,
abosch
--