Advertisement
Help Keep Boards Alive. Support us by going ad free today. See here: https://subscriptions.boards.ie/.
If we do not hit our goal we will be forced to close the site.

Current status: https://keepboardsalive.com/

Annual subs are best for most impact. If you are still undecided on going Ad Free - you can also donate using the Paypal Donate option. All contribution helps. Thank you.
https://www.boards.ie/group/1878-subscribers-forum

Private Group for paid up members of Boards.ie. Join the club.
Hi all, please see this major site announcement: https://www.boards.ie/discussion/2058427594/boards-ie-2026

Openldap and SSL

  • 07-04-2012 08:12PM
    #1
    Rambo
    Registered Users, Registered Users 2 Posts: 811 ✭✭✭


    I install openldap on redhat linux 6
    imported a ldif file and setup slapd.conf and ldap.conf

    all works fine I can browse ldap directory fine using port 389
    but when I try to setup a ssl ldap server if fails to startup

    I tried to follow these instructions
    http://www.openldap.org/faq/data/cache/185.html

    but I appear to missing some files
    like
    cacert.pem
    serverkey.pem

    anybody else have experience on this
    if I uncomment the ssl config the ldap server start up fine


Comments

  • #2
    Rambo
    Registered Users, Registered Users 2 Posts: 811 ✭✭✭Rambo


    Redhat linux 6 openldap and SSL
    I got this working

    CA.sh script is located at /etc/pki/tls/misc
    which is called CA no .sh

    the cacert.pem file were located at
    /etc/pki/CA/

    and I followed the instructions very carefullly
    http://www.openldap.org/faq/data/cache/185.html

    just had to change path
    ./etc/pki/tls/misc/CA -newca


  • #3
    druidhill
    Registered Users, Registered Users 2 Posts: 200 ✭✭druidhill


    A few points for you to consider:

    It sounds like it cannot find the files you mentioned, so check their location (and that you have correct permissions on them).

    Are you using the correct port?

    I know I did set this up before and got it working, but am a little rusty on it. Also, I used the following:

    olcTLSCACertificateFile
    olcTLSCertificateFile
    olcTLSCertificateKeyFile

    I think it has something to do with the way I set up OpenLDAP (using cn=config), but as I said, I am unsure of exactly what I did because it was a while ago, I just know it was up and running encrypted.

    I'd say work through the guide again, double checking what you did. You should get it up and running then.

    Good luck.


  • #4
    druidhill
    Registered Users, Registered Users 2 Posts: 200 ✭✭druidhill


    OP, have you an update for us?
    (I looked into this again for my own setup and it is up and working, so might have a couple of more suggestions for you). Let us know.


Advertisement