I have a several openldap clients. Certs are installed in /etc/openldap/cacerts. I am
using server certificates to to establish an SSL connection with the LDAP server. Using
PAM LDAP to authenticate users. I would like to test hardening these clients.
1. What are the absolute minimum permissions required for the TLS CERT and TLS KEY?
2. Can the TLS key have a password or must it always be without password?
Thanks,
Paul M. Whitney
E-mail: paul.whitney(a)mac.com
Sent from my browser.
Show replies by thread