On 16.4.2013 23:10, Kyle Flavin wrote:
On Tue, Apr 16, 2013 at 2:04 PM, Rob Crittenden
> expert alert wrote:
>> I am planning to deploy all my ldap server by puppet.
>> so I am wondering, Can i use Same Server Certificate and CA certificate
>> (Directory server) for all my server ???
>> if yes, then under which directory shall i place those certificate ??
Although it is technically possible, it is not recommended.
All servers will share the same private key, so the chance that the key will
be compromised is bigger - you need to transfer the key securely from one
server to another etc.
Could you explain your use case? I'm curious :-)