[389-users] Question on certificate storage

[Orion Poplawski]

I'm trying to setup MMR with another office site.  We're trying to connect 
over SSL, but my server gives the error:

[23/Sep/2011:12:00:56 -0600] slapi_ldap_bind - Error: could not send bind 
request for id [cn=Replication Manager,cn=config] mech [SIMPLE]: error 81 
(Can't contact LDAP server) -8179 (Peer's Certificate issuer is not 
recognized.) 11 (Resource temporarily unavailable)

I've added what I believe are the proper CA certs (it is a chain of 3) for the 
remote server to my directory server via the 389-console and manage 
certificates.  However, I noticed that when I use certutil on the server to 
list the certificates, I don't see them:

# certutil  -d /etc/dirsrv/slapd-cora/ -L

Certificate Nickname                                         Trust Attributes
                                                              SSL,S/MIME,JAR/XPI

CA certificate                                               CT,,
server-cert                                                  u,u,u

I would have thought they would be stored in the same place.  If not, where 
are the one listed in the console stored?  Does it matter that they aren't 
showing up with certutil?

Anything else I can do to debug the SSL connection?

-- 
Orion Poplawski
Technical Manager                     303-415-9701 x222
NWRA/CoRA Division                    FAX: 303-415-9702
3380 Mitchell Lane                  orion at cora.nwra.com
Boulder, CO 80301              http://www.cora.nwra.com