2011/10/19 Chris Cawley <caw...@wrlc.org> > Went back to the docs again and this resolved that issue:**** > > certutil -A -i /var/tmp/wrlc.org.crt -t "u,u,u" -d /etc/dirsrv/slapd-ldap > -n "server-cert"**** > > ** ** > > However, I now get this error:**** > > [19/Oct/2011:10:34:36 -0400] - SSL alert: CERT_VerifyCertificateNow: verify > certificate failed for cert server-cert of family > cn=RSA,cn=encryption,cn=config (Netscape Portable Runtime error -8179 - > Peer's Certificate issuer is not recognized.)**** > > ** ** > > I am guessing that there are other certutil commands?**** > > ** ** > > BTW, this all came about because the gui does not support 2048 bit csr’s.* > *** > > ** >
This is good since it works now, all you need is to run 1 more certutil command to import the CA cert. I noticed sometimes there were certs that didn't appear in the GUI, but certutil -L would show they were there. hope this helps..
-- 389 users mailing list 389-us...@lists.fedoraproject.org https://admin.fedoraproject.org/mailman/listinfo/389-users