On 02/17/2010 04:55 PM, Doug Reiland wrote:
I am going thru the step of creating the certs. for kojira, kojiadm,
...
If I understand the directions correctly, the field for common name is
"admin" for everybody except kojihub and kojiweb, which used my server
name.
I do the following steps:
openssl genrsa ..
openssl req ...
openssl ca ..
The openssl ca works for the first user (say kojira), but not the
next, kojiadmin:
failed to update database
TXT_DB error number 2
So, /etc/pki/koji/certs/*.crt end up empty and when I restart httpd,
it fails because /etc/http/conf.d/ssl.conf is including some of them.
What am I missing?
Could you show exactly what commands you're running?
You should not be trying to make multiple certificates with the same
common name. The CN is the default field used as the Koji "username",
and must be unique per user, service, and build host. Sharing the same
certificate (or different certs with the same CN) will not work.