[389-users] How to use existing SSL cert?

[Rich Megginson]

Sean Carolan wrote:
>>> Is the process of importing a cert for the admin console the same as
>>> the one for the directory server?  They both have cert8.db and key3.db
>>> files.  But that is how I locked myself out the first time I tried!
>>>
>>>       
>> I'm not sure what happened - configuring TLS/SSL using the console is
>> tricky, and must usually be performed in a certain order, or you can
>> lock yourself out of the console.
>>     
>
> It's ok, for now I'm just happy to have a working system with TLS
> authentication.  I'll work on securing the admin console later.  Is
> the process the same though?  Eg, using the pk12util -i command to
> import my cert into cert8.db and key3.db?
>   
You shouldn't have to import any certs into the console.  See 
http://www.redhat.com/docs/manuals/dir-server/8.1/console/Starting_the_Server_with_SSL_Enabled-Enabling_SSL_in_the_DS_Admin_Server_and_Console.html
> --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users
>