[389-users] advice on ssl cert rotation

[Christopher Wood]

You can use certutil to manually modify the cert stores. If you installed via rpm this will already be on your systems.

Not at my work systems so I don't recall which package it's in.

On Tue, Mar 01, 2011 at 07:27:53PM -0800, jon heise wrote:
>    Recently i had ssl certs expire on my directory servers, currently i have
>    one running without using an ssl cert, the secondary server is still set
>    to use the old cert and as such it is not functioning.� On the primary
>    server the admin server has been set to use a new self signed cert but we
>    are locked out of that.� Is there a way to change what cert the ldap
>    server will load without the use of the admin server ?

> --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users