Thank you , still some confusion here which one of the existing 389-DS dbs is the
"nss database " as per doc ?
/etc/dirsrv/slapd-ldap/cert8.db
/etc/dirsrv/slapd-ldap/key3.db
/etc/dirsrv/slapd-ldap/secmod.db
From: Mark Reynolds [mailto:mreynolds@redhat.com]
Sent: Thursday, July 02, 2020 12:27 PM
To: General discussion list for the 389 Directory server project.; Ghiurea, Isabella
Subject: Re: [389-users] Re: question related to EnabledCiphers values
Sorry those were the docs for DS 11 on RHEL 8, here is the link for RHEL 7:
https://access.redhat.com/documentation/en-us/red_hat_directory_server/10...
On 7/2/20 3:19 PM, Ghiurea, Isabella wrote:
Thank you for reply Mark , according to doc link there is a cmd: dsconf  which I do not
see available in 389-DS to list all available chippers on the host  is there any other
solution to check  ,  my OS is Linux ns1-01 3.10.0-862.14.4.el7.x86_64 #1 SM
Thank you
Isabella
Â
From: Mark Reynolds [mailto:mreynolds@redhat.com]
Sent: Thursday, July 02, 2020 11:32 AM
To: General discussion list for the 389 Directory server project.; Ghiurea, Isabella
Subject: Re: [389-users] question related to EnabledCiphers values
Â
Â
On 7/2/20 2:21 PM, Ghiurea, Isabella wrote:
Ã'Â Running the following ldapsearch returns a lots of entries for
nsSSLEnabledCiphers, but I do not see this values in dse.ldif , where are this values
configured or Ã'Â read, please advise ?
Ã'Â
nsldapsearch -LLLxD 'cn=directory manager' -W -b cn=encryption,cn=config -s base
nsSSL3Ciphers nsSSLSupportedCiphers nsSSLEnabledCiphers
The supported and enabled ciphers are provided by the NSS security library (which in turn
is impacted by the system-wide crypto policy).
Also see:
https://access.redhat.com/documentation/en-us/red_hat_directory_server/11...
Ã'Â
Thank you
Isabella
_______________________________________________
389-users mailing list --
389-users@lists.fedoraproject.org<mailto:389-users@lists.fedoraproject.org>
To unsubscribe send an email to
389-users-leave@lists.fedoraproject.org<mailto:389-users-leave@lists.fedoraproject.org>
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproje...
--
Â
389 Directory Server Development Team
_______________________________________________
389-users mailing list --
389-users@lists.fedoraproject.org<mailto:389-users@lists.fedoraproject.org>
To unsubscribe send an email to
389-users-leave@lists.fedoraproject.org<mailto:389-users-leave@lists.fedoraproject.org>
Fedora Code of Conduct:
https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines:
https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives:
https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproje...
--
389 Directory Server Development Team