[389-users] Re: tls encryption and key changes: symmetric key failed to unwrap

[Jan Kowalsky]

Hi Viktor,

Thanks for the hint.
Am 01.06.2018 um 12:16 schrieb Viktor Ashirov:
> Hi,
> It's possible to regenerate encryption keys from the new certificate:
> https://access.redhat.com/documentation/en-us/red_hat_directory_server/10/ht...

I was already afraid, this is the only possibility. Nothing which I want
do every 60 days with about 50 databases and three replicated servers.

So probably disable encrypted attributes is the only way.

Dou you know if it's possible to disable encrypted attributes system
wide for all databases? Didn't find anything.

Thanks and regards
Jan