I'm trying tonight with latest builds from http://download.opensuse.org/repositories/home:/dl9pf/ so I'll let you know how it goes... in the mean time...

Also, to clarify, I'm creating PEM certificates here... does it matter if they're PEM or DER? According to Novell's docs on iFolder 3.6, it doesn't, but just want to make sure.

I created self signed certs for apache the way I've done it hundreds of times before:

create CA:
  openssl genrsa -des3 -out ca.key 4096
  openssl req -new -x509 -days 3650 -key ca.key -out ca.crt

create server key:
  openssl genrsa -des3 -out server.key 4096
  openssl req -new -key server.key -out server.csr

sign csr:
  openssl x509 -req -days 3649 -in server.csr -CA ca.crt -CAkey ca.key \
    -set_serial 01 -out server.crt

remove password from server.key (for apache)
  openssl rsa -in server.key -out server.key.insecure

I copied the server.crt into a directory I created beforehand (and configured in the simias-server-setup: /disk1/iFolderCert (owner wwwrun, perms 0755, and cert owner wwwrun, perms 0644)

The cert works just fine for apache and also for the iFolder client (once I went into IE and accepted the certificate/or CA cert into my trusted certs). I have pure SSL working between my client (windows 3.6.something) and my server openSuSE 10.2

I'm just not getting anything to work with the recovery agent cert piece...

Thanks yet again,

Russ J.



Sujatha Narasimhan wrote:
Russ,

It is possible for you try with the latest builds?

In the mean time, Can you share the way you created the .DER certificates?
Thanks,
Suja


.. cut for brevity ...
_______________________________________________
ifolder-dev mailing list
[email protected]
http://forge.novell.com/mailman/listinfo/ifolder-dev

Reply via email to