[389-users] ssl replication

[solarflow99]

>  You can use certutil on the master to make a cert for the slave, using
> the above command on the master.  Then, use pk12util to export the slave
> cert/key, then take that pk12 file to the slave and use pk12util to import
> it (and use certutil to import the CA cert).
>



Thanks for this, it worked.   I had to disable: check hostname against name
in cerfificate for outbound SSL connections, but its actually working now.
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20110519/4da2ec8b/attachment.html>