[Fedora-directory-users] Importing private key into certificate store
Rob Crittenden
rcritten at redhat.com
Tue Sep 13 15:33:03 UTC 2005
Or since you have 2 PEM files, you can use openssl to convert it into
PKCS#12 file:
% openssl pkcs12 -export -in cert.pem -inkey key.pem -out cert.p12 -name
\"Server-Cert\" -passout pass:foo
You can then import that into your database with something like:
% pk12util -i cert.p12 -d <server-root>/alias -P slapd-YOURHOST- -W foo
Replace <server-root> with the path to your DS install, probably
/opt/fedora-ds. Check the alias directory to see what the value of
YOURHOST should be. Note that the trailing dash is important.
rob
Rich Megginson wrote:
> You need to get your CA to export your key/cert data in pkcs12 (.p12)
> format, then use the FDS pk12util to import both the key and cert.
>
> Kevin M. Myer wrote:
>
>> Hello,
>>
>> I would like to use an external application to handle my certificate
>> request
>> (I'm using self-signed certificates - essentially my CA application would
>> generate the request and then sign it, instead of using any of the FDS
>> components to generate the request). This process works fine, except
>> that
>> there doesn't appear to be an easy way to get the private key for the
>> certificate into the certificate store. Obviously, if you use the
>> certificate
>> wizard or certutil to generate the request, the key ends up in the
>> store. But
>> if you don't, is there a way to import a key, so that importing a
>> certificate
>> will work? Currently it balks about importing a signed certificate
>> because the
>> private key is missing. I tried combining key and certificate into
>> one file
>> (PEM format) but that didn't help.
>>
>> Kevin
>>
>>
>>
>
> ------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users at redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
-------------- next part --------------
A non-text attachment was scrubbed...
Name: smime.p7s
Type: application/x-pkcs7-signature
Size: 3178 bytes
Desc: S/MIME Cryptographic Signature
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20050913/f188949e/attachment.bin>
More information about the 389-users
mailing list