Hello.

I'm using openssl(1) 2-3 years without bigger problem, but now I have one
question:

I have some nasty piece of software called cisco access registrar
(radius server). Documentation for that radius server says that I can
have SSL encrypted connection between radius and my OpenLDAP server.

However, it also says that certificate MUST be in ... let me cite
documentation:

 CertificateDBPath

      Required if you are using an LDAP RemoteServer, and you want
      Cisco Access Registrar to use SSL when communicating with that
      LDAP RemoteServer. This property specifies the name of the file
      containing the client certificates to be used when establishing
      an SSL connection to an LDAP RemoteServer. It must be either the
      cert5.db certificate database used by Netscape Navigator 3.x
      (and above), or the ServerCert.db certificate database used by
      Netscape 2.x servers.

So, I cannot put server's cert and/or our CA + key in pem formats
someware and configure server to use it. I must convert normal
certificates in cert5.db or ServerCert.db format.

How can I do this with openssl(1)? I have read man pages for pkcs7
pkcs8 pkcs12 etc ... grep google but I cannot find anything usefull.

Can you help me please?


-- 
                The Network is the Filesystem
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to