Yes indeedie, sir.  You were right about requiring the passphrase.  If I
summon slapd via the command "service ldap start", when the system responds
"starting ldap:", I type in the passphrase, and off we go.  With the command
"slapd -u ldap -d 255", I'm prompted for the passphrase.  Many thanks!

One more question, if I may:  when I view the certificate in my browser, it
shows that the cert. was issued to localhost.localdomain by
localhost.localdomain.  Of course, in ceating both the CA and the
certificate, I plugged in my company-spcific information.  I would expect to
see this in the cert.  Why am I not?  How do I get my certificate to show?
Now, if I can lick this ...

Dimitri

-----Original Message-----
From: QM [mailto:[EMAIL PROTECTED]
Sent: Tuesday, August 05, 2003 19:16
To: [EMAIL PROTECTED]
Subject: Re: OpenLDAP w/ my certificate won't start


: I'm having a problem getting openldap to work with SSL on RH 7.3.  When I
: use the dummy certificate that comes with 7.3 slapd starts fine; when I
: create my own CA and certificate, it hangs.


Does your new cert have a passphrase on the private key?

slapd may not have hung, per se, but -- like other apps which support
SSL certs -- it could be waiting for someone to input a passphrase for the
cert's key.

I don't know offhand whether OpenLDAP supports putting the passphrase in
a config file, or passing it via stdin.


Otherwise, you could fire up slapd with copious debug output and/or run
strace to see where it's hanging.  As root, run:

        slapd -u ldap -d 255


-QM

--

www.brandxdev.net
C++ / Java / SSL

______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    [EMAIL PROTECTED]
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to