[389-users] Setting Up dirsrv to Use TLS/SSL

[Rich Megginson]

On 04/30/2012 09:11 PM, Dan Whitmire wrote:
> I think I made a mistake but not sure what.
>
> I successfully installed the Server Certs and CA certs generated from 
> my dogtag CA.  I set all the necessary parameters.  I confirmed that 
> the New Certificates were installed and restarted the directory 
> server.  Now I get the error message in 
> /var/log/dirsrv/slapd-SonshineServer/errors
>
> [30/Apr/2012:21:57:16 -0500] - SSL alert: Security Initialization: 
> Unable to authenticate (Netscape Portable Runtime error -8192 - An I/O 
> error occurred during security authorization.)
> [30/Apr/2012:21:57:16 -0500] - ERROR: SSL Initialization Failed.
>
> Any ideas on what I can do to fix the problem would be greatly 
> appreciated.  I'm on F15 and updated my 389 packages to the following:
>
> 389-admin.x86_64                          
> 1.1.29-1.fc15                 @updates
> 389-admin-console.noarch                  
> 1.1.8-1.fc15                  @updates
> 389-admin-console-doc.noarch              
> 1.1.8-1.fc15                  @updates
> 389-adminutil.x86_64                      
> 1.1.15-1.fc15                 @updates
> 389-adminutil-devel.x86_64                
> 1.1.15-1.fc15                 @updates
> 389-console.noarch                        
> 1.1.7-1.fc15                  @updates
> 389-ds.noarch                             
> 1.2.2-1.fc15                  @updates
> 389-ds-base.x86_64                        
> 1.2.10.6-1.fc15               @updates
> 389-ds-base-devel.x86_64                  
> 1.2.10.6-1.fc15               @updates
> 389-ds-base-libs.x86_64                   
> 1.2.10.6-1.fc15               @updates
> 389-ds-console.noarch                     
> 1.2.6-1.fc15                  @updates
> 389-ds-console-doc.noarch                 
> 1.2.6-1.fc15                  @updates
> 389-dsgw.x86_64                           
> 1.1.9-1.fc15                  @updates
> Available Packages
> 389-admin.i686                            
> 1.1.29-1.fc15                 updates
> 389-adminutil.i686                        
> 1.1.15-1.fc15                 updates
> 389-adminutil-devel.i686                  
> 1.1.15-1.fc15                 updates
> 389-ds-base-devel.i686                    
> 1.2.10.6-1.fc15               updates
> 389-ds-base-libs.i686                     
> 1.2.10.6-1.fc15               updates
ls -al /etc/dirsrv/slapd-*
grep -i localuser /etc/dirsrv/slapd-*/dse.ldif
certutil -d /etc/dirsrv/slapd-* -L
>
>
>
> --
> 389 users mailing list
> 389-users at lists.fedoraproject.org
> https://admin.fedoraproject.org/mailman/listinfo/389-users

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.fedoraproject.org/pipermail/389-users/attachments/20120501/4bf67201/attachment.html>