It's all of them :-)
cert8.db stores the certificates, key3 stores the keys, and I'm not sure
what secmod is used for :-)Â Together they are the NSS database, but you
never need to mess with those files.
On 7/2/20 3:39 PM, Ghiurea, Isabella wrote:
Thank you , still some confusion here which one of the existing 389-DS
 dbs is the “nss database “ as per doc ?
/etc/dirsrv/slapd-ldap/cert8.db
/etc/dirsrv/slapd-ldap/key3.db
/etc/dirsrv/slapd-ldap/secmod.db
*From:*Mark Reynolds [mailto:mreynolds@redhat.com]
*Sent:* Thursday, July 02, 2020 12:27 PM
*To:* General discussion list for the 389 Directory server project.;
Ghiurea, Isabella
*Subject:* Re: [389-users] Re: question related to EnabledCiphers values
Sorry those were the docs for DS 11 on RHEL 8, here is the link for
RHEL 7:
https://access.redhat.com/documentation/en-us/red_hat_directory_server/10...
On 7/2/20 3:19 PM, Ghiurea, Isabella wrote:
Thank you for reply Mark , according to doc link there is a cmd:
dsconf  which I do not see available in 389-DS to list all
available chippers on the host  is there any other solution to
check  ,  my OS is Linux ns1-01 3.10.0-862.14.4.el7.x86_64 #1 SM
Thank you
Isabella
Â
*From:*Mark Reynolds [mailto:mreynolds@redhat.com]
*Sent:* Thursday, July 02, 2020 11:32 AM
*To:* General discussion list for the 389 Directory server
project.; Ghiurea, Isabella
*Subject:* Re: [389-users] question related to EnabledCiphers values
Â
Â
On 7/2/20 2:21 PM, Ghiurea, Isabella wrote:
 Running the following ldapsearch returns a lots of entries
for nsSSLEnabledCiphers, but I do not see this values in
dse.ldif , where are this values configured or  read,
please advise ?
ÂÂ
nsldapsearch -LLLxD 'cn=directory manager' -W -b
cn=encryption,cn=config -s base nsSSL3Ciphers
nsSSLSupportedCiphers nsSSLEnabledCiphers
The supported and enabled ciphers are provided by the NSS security
library (which in turn is impacted by the system-wide crypto policy).
Also see:
https://access.redhat.com/documentation/en-us/red_hat_directory_server/11...
ÂÂ
Thank you
Isabella
_______________________________________________
389-users mailing list --389-users(a)lists.fedoraproject.org
<mailto:389-users@lists.fedoraproject.org>
To unsubscribe send an email to389-users-leave(a)lists.fedoraproject.org
<mailto:389-users-leave@lists.fedoraproject.org>
Fedora Code of
Conduct:https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List
Guidelines:https://fedoraproject.org/wiki/Mailing_list_guidelines
List
Archives:https://lists.fedoraproject.org/archives/list/389-users@lists.fe...
--
Â
389 Directory Server Development Team
_______________________________________________
389-users mailing list --389-users(a)lists.fedoraproject.org
<mailto:389-users@lists.fedoraproject.org>
To unsubscribe send an email to389-users-leave(a)lists.fedoraproject.org
<mailto:389-users-leave@lists.fedoraproject.org>
Fedora Code of
Conduct:https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List
Guidelines:https://fedoraproject.org/wiki/Mailing_list_guidelines
List
Archives:https://lists.fedoraproject.org/archives/list/389-users@lists.fe...
--
389 Directory Server Development Team