Re: SSL client certificate question and bdb_dn2id_matched question

[Bradley Scutvick <brad@bytewise.net>]

>I have created the key and the certificate (in one file) with:
>openssl -req -new -x509 -nodes -days 730 -out ldap.pem -keyout ldap.pem
> And i am using this file in slapd.conf as "TLSCertificateFile",
> "TLSCertificateKeyFile" and "TLSCACertifikateFile".

Whoa, that's not right.  These are three different files.  One is a 
server certificate, one is a CA certificate, and one is the private key 
for the server.

-brad