Obviously the setup-ds.pl script can be modified to import certificate, but I'd prefer installing server without SSL firstly and then use additional script to install certificate(s) and enable SSL for server/admin unattended.
Let me know if you need any examples.


On 23/12/12 22:43, Graham Leggett wrote:
Hi all,

I am currently trying to script the setup of a directory using the ConfigFile entry within an INF file, and so far I've hit a snag.

In order to enable SSL on the directory, first I must use certutil to import the certificate to be used, otherwise the attempt to add the cn=RSA,cn=encryption,cn=config entry fails saying "No such object". If I set up the directory, then manually add the certificates, then manually enable SSL by adding the cn=RSA,cn=encryption,cn=config entry (and various other SSL related configs), it seems to work fine.

Is there some way of getting setup-ds.pl to import a given certificate (p12 file, whatever) when the server is set up, in addition to creating the initial certificate database within /etc/dirsrv/slapd-INSTANCE/?


389 users mailing list