directory-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From Kevin Hamilton <khamil...@umem.org>
Subject Re: Problem with Certificate Loading
Date Wed, 07 Sep 2011 20:34:03 GMT
In Apache Directory Studio (where I am viewing and editing my
certificates, it gives them in an encrypted binary fashion and does
not allow me to import my normal plaintext keys. Doing this crashes
apacheds. How can I go about changing the way the apacheds encrypts
the keys?


thanks,
Kevin
On Wed, Sep 7, 2011 at 11:09 AM, Kiran Ayyagari <kayyagari@apache.org> wrote:
> Hi Kevin,
>
>    You need to manually upload the keys also as you did with the
> certificate in server
>     (note that closing and opening studio will not impact the server
> at all, you might already be aware of this but just to make it clear)
>
>    Let us know if you still face any issue after doing this
>
> On Wed, Sep 7, 2011 at 8:33 PM, Kevin Hamilton <khamilton@umem.org> wrote:
>> Hello,
>>
>> My name is Kevin Hamilton and I am currently attempting to set up
>> ApacheDS 2.0.0-M2 on a linux server.
>>
>> When I try to set up SSL encryption, it claims that my certificate is
>> not valid, and prompts me to accept it or not. When I hit yes, it
>> allows me to log on to the LDAP.
>>
>> However, when I try to connect via ldaps:// using PHP, it does not
>> connect to the server and gives an error that the certificate is not
>> valid.
>>
>> I have a valid certificate from my website that seemingly would work
>> if I changed it.
>>
>> I narrowed down the certificate location to the uid=admin,ou=system entry.
>>
>> I click on certificate and load in my site's valid certificate. But
>> when I close out of Apache Directory Studio and come back in, it has
>> reverted back to the original certificate. Also, in the rare cases
>> where it hasn't reverted, the publickey/privatekey entries have not
>> updated, so it still fails.
>>
>> How can I add my certificate to the server so it works well with php and ssl?
>>
>> Thanks in advance,
>> Kevin
>>
>
>
>
> --
> Kiran Ayyagari
>

Mime
View raw message