[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Translucent overlay search fails with TLS "cannot find private key for certificate"

To: openldap-technical@openldap.org
Subject: Re: Translucent overlay search fails with TLS "cannot find private key for certificate"
From: Ernie Kovak <ernie.kovak@gmail.com>
Date: Tue, 22 Sep 2015 11:08:23 -0600
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :content-type; bh=gLJ99+OVhWGxwvg5uJNd4JGAh8UVDSP/KNk8FMB1rVM=; b=xiw1qg4fR2n9hAhryWar4+ZNOqevZdPLMN+hW6a1Cc2rLdAXg1VCx372SpkHsE/E0A rgJsW4C1FpKhYPBo4FtxTvBQi06su3AqOupdyjbQOq141odtHPTY3I7ST4Ts7XZmraLR eyHSM3DpW5trGNashcTf56GMvXvnd/dmWHO54LBQ6tSjLkqfy6WZcwJsWWYrEiTcSaTv ZGwMRiYyvzVrmXCJEp6c9A2mA3b00Y/CT4YRQ7g/iVxoln4rtyy5SmW4mPCcuABQe1e9 txoOMw52GzvFDdbUGGdaa4S8JA/iG4X9/M9jShrgW7VwB6RnYQNo7ARmKAL26BkgrnRQ iNKg==
In-reply-to: <CAKC-s8gG_jkD-WZP4gYNjOP09CLWAS2wqbKKLoZA47zays_w4g@mail.gmail.com>
References: <CAKC-s8g861ZS1FktTTp8OUrH1P+AKO20MUzPmuZ34mhkXfCvqw@mail.gmail.com> <CAKC-s8gG_jkD-WZP4gYNjOP09CLWAS2wqbKKLoZA47zays_w4g@mail.gmail.com>

This was caused by trying to use NSS in FIPS mode, which requires a password on the NSS keys database. Taking NSS out of FIPS mode and removing the password fixed it.

References:
- Translucent overlay search fails with TLS "cannot find private key for certificate"
  - From: Ernie Kovak <ernie.kovak@gmail.com>
- Re: Translucent overlay search fails with TLS "cannot find private key for certificate"
  - From: Ernie Kovak <ernie.kovak@gmail.com>

Prev by Date: Re: funny error
Next by Date: ACLs whont work
Index(es):
- Chronological
- Thread