On Friday, 10/23/2009 at 05:55 EDT, Marcy Cortes <[email protected]> wrote: > I finally got SSLESRV working on 5.4 with our CA. Yay! > > Now.. If I have more than one TCPIP stack on a system, say TCPIP and TCPIP2. I > figure I'll need an SSLSERV and an SSLSERV2. > But can they share /etc/gskadm/Database.kdb ? I can't see why not. > > And.. If I've done that, can they use the same cert?
Yes, but if you initialize an SSL server while you're in the middle of updating the KDB, "unpredictable results may occur." There is no file-level locking. That said, you may not use it on two different hosts unless it is a wildcard cert. Alan Altmark z/VM Development IBM Endicott
