[Fedora-directory-users] Directory Server and SSL

[Wilmer Jaramillo M.]

Greetings,
I have followed the instructions in the documentation of Red
Hat(http://www.redhat.com/docs/manuals/dir-server/ag/7.1/ssl.html ),
nevertheless, late to generate certificates CA for the Directory
Server being listened in port 636 with SSL profit not to activate them
for the Administrator Server(https), by some reason the list does not
appear to me in (Server Group>Administrator
Server>Open>Configuration>Encryption>Certificate)

Thanks.


--
Wilmer Jaramillo M.
San Cristóbal - Venezuela
TALUG - http://www.linuxtachira.org
Linux User: 278.161 -- irc.freenode.net #talug
GPG Key Fingerprint = 0666 D0D3 24CE 8935 9C24 BBF1 87DD BEA2 A4B2 1E8A

[Wilmer Jaramillo M.]

 Greetings,
I have followed the instructions in the documentation of Red
Hat(http://www.redhat.com/docs/manuals/dir-server/ag/7.1/ssl.html ),
nevertheless, late to generate certificates CA for the Directory
Server being listened in port 636 with SSL profit not to activate them
for the Administrator Server(https), by some reason the list does not
appear to me in (Server Group>Administrator
>  Server>Open>Configuration>Encryption>Certificate) 
 Thanks.

--
Wilmer Jaramillo M.
San Cristóbal - Venezuela
TALUG - http://www.linuxtachira.org
Linux User: 278.161 -- irc.freenode.net #talug
GPG Key Fingerprint = 0666 D0D3 24CE 8935 9C24 BBF1 87DD BEA2 A4B2 1E8A

Hello Wilmer.  If I understand correctly, you created a certificate and
it doesn't show up in the encryption configuration in the Admin Server
Console.  Enabling SSL here will allow your Console to use https against
your Admin Server, and your AS can use ldaps against your FDS (if FDS
has SSL enabled).

In this case the certificate should be added to
admin-serv-{hostname}-cert8.db, because AS keeps a separate certificate
database from FDS.

You can get a list of the certificates in the certificate database:
# cd /opt/fedora-ds/shared/bin
# ./certutil -L -d ../../alias -P admin-serv-example-

Make sure the trailing slash is there for the -P argument.

Wilmer Jaramillo wrote:

>  Greetings,
> I have followed the instructions in the documentation of Red
> Hat(http://www.redhat.com/docs/manuals/dir-server/ag/7.1/ssl.html ),
> nevertheless, late to generate certificates CA for the Directory
> Server being listened in port 636 with SSL profit not to activate them
> for the Administrator Server(https), by some reason the list does not
> appear to me in (Server Group>Administrator
>   
>
> >Server>Open>Configuration>Encryption>Certificate)
> >    
> >
>
>  Thanks.
>
> --
> Wilmer Jaramillo M.
> San Cristóbal - Venezuela
> TALUG - http://www.linuxtachira.org
> Linux User: 278.161 -- irc.freenode.net #talug
> GPG Key Fingerprint = 0666 D0D3 24CE 8935 9C24 BBF1 87DD BEA2 A4B2 1E8A
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users(a)redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>   
>

[Wilmer Jaramillo M.]

wow, thank you for your help, taking into account your observation i
copies the database of DS for AS and work, greetings.

2005/11/8, uffe(a)loop.to <uffe(a)loop.to&gt;:
>  In this case the certificate should be added to
>  admin-serv-{hostname}-cert8.db, because AS keeps a separate certificate
>  database from FDS. 
--
Wilmer Jaramillo M.
San Cristóbal - Venezuela
TALUG - http://www.linuxtachira.org
Linux User: 278.161 -- irc.freenode.net #talug
GPG Key Fingerprint = 0666 D0D3 24CE 8935 9C24 BBF1 87DD BEA2 A4B2 1E8A