[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Openldap and TLS issue



----- "Ivan Ordonez" <iordonez@nature.berkeley.edu> wrote:

> Looking at the debug log, it is expired. It puzzle me because the
> certs on the other two machine are working correctly.

Check their expiry dates with:

openssl x509 -in /usr/local/etc/openldap/ldap-slave_cert.pem -text
 
> Since this is the case (certificate expires), is it safe to create a
> new one for this machine?

Of course, then sign it with the cacert, something like:

./CA.sh -newreq
./CA.sh -sign

-- 
Kind Regards,

Gavin Henry.
OpenLDAP Engineering Team.

E ghenry@OpenLDAP.org

Community developed LDAP software.

http://www.openldap.org/project/