certutil -L -d /etc/dirsrv/slapd-instance
certutil -L -d /etc/dirsrv/admin-serv

Anand Vaddarapu wrote:
Hi,
ls -al ~/.fedora-idm-console/
total 12
drwxr-xr-x  2 root root 4096 Feb 26 08:46 .
drwxr-x--- 12 root root 4096 Mar 26 16:10 ..


certutil -L -d ~/.fedora-idm-console/
certutil: function failed: security library: bad database.

Thanks




On Tue, Apr 1, 2008 at 4:57 AM, Rich Megginson <[EMAIL PROTECTED] <mailto:[EMAIL PROTECTED]>> wrote:

    Anand Vaddarapu wrote:
    > Hi,
    >
    > After enabling SSL with console using the procedure
    >
    _http://directory.fedoraproject.org/wiki/Howto:SSL#Console_SSL_Information_
    > i am getting these following error messages when i am trying to
    login
    > into directory server in the console. SSL is enabled in both the
    admin
    > console & the Ldap server
    >
    > From logs:
    >  [27/Mar/2008:14:56:24 +1100] conn=47 fd=66 slot=66 SSL connection
    > from 10.50.5.81 <http://10.50.5.81> <http://10.50.5.81> to
    10.50.1.24 <http://10.50.1.24> <http://10.50.1.24>
    > [27/Mar/2008:14:56:24 +1100] conn=47 op=-1 fd=66 closed - SSL peer
    > cannot verify your certificate.
    ls -al ~/.fedora-idm-console
    certutil -L -d ~/.fedora-idm-console
    >
    > we are these when starting the Ldap server
    >
    > 27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to unwrap
    > key for cipher AES
    > [27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for cipher AES
    > in attrcrypt_cipher_init
    > [27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher AES in
    > attrcrypt_init
    > [27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to
    unwrap
    > key for cipher AES
    > [27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for cipher AES
    > in attrcrypt_cipher_init
    > [27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher AES in
    > attrcrypt_init
    > [27/Mar/2008:14:45:05 +1100] - slapd started.  Listening on All
    > Interfaces port 389 for LDAP requests
    > [27/Mar/2008:14:45:05 +1100] - Listening on All Interfaces port 636
    > for LDAPS requests
    >
    >
    >
    > Console error message:
    >
    > netscape.ldap.LDAPException:JSSSocketFactory.makeSocket
    > devil.wcg.net.au:636 <http://devil.wcg.net.au:636>
    <http://devil.wcg.net.au:636>, SSL_ForceHandshake
    > failed: (-8054) unknown error (91)
    >
    > Help Appreciated.
    >
    > Thanks
    >
    >
    >
    >
    >
    >
    >
    ------------------------------------------------------------------------
    >
    > --
    > Fedora-directory-users mailing list
    > [email protected]
    <mailto:[email protected]>
    > https://www.redhat.com/mailman/listinfo/fedora-directory-users
    >


    --
    Fedora-directory-users mailing list
    [email protected]
    <mailto:[email protected]>
    https://www.redhat.com/mailman/listinfo/fedora-directory-users


------------------------------------------------------------------------

--
Fedora-directory-users mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/fedora-directory-users

Attachment: smime.p7s
Description: S/MIME Cryptographic Signature

--
Fedora-directory-users mailing list
[email protected]
https://www.redhat.com/mailman/listinfo/fedora-directory-users

Reply via email to