[389-users] generate certificate request with certutil

2009-12-17 Thread muzzol
hi, i want to generate a certificate request from command line to send to an external CA. this is what i use: certutil -S -n "test-server" -s "CN=testserver.example.com" -c "CA auth" -t "u,u,u" -m 1023 -v 120 -d . and i get this error: certutil: unable to retrieve key CA auth: The private key

[389-users] import private key

2009-12-17 Thread Mikael Kermorgant
Hello, I've asked for a bunch of certificate lately, issuing certificate request with openssl for all of them. Unfortunately, I forgot that the procedure for installing a certificate in 389ds was to issue the certificate request with its own tools. Is there an easy way to import my private key i

Re: [389-users] generate certificate request with certutil

2009-12-17 Thread Rob Crittenden
muzzol wrote: hi, i want to generate a certificate request from command line to send to an external CA. this is what i use: certutil -S -n "test-server" -s "CN=testserver.example.com" -c "CA auth" -t "u,u,u" -m 1023 -v 120 -d . and i get this error: certutil: unable to retrieve key CA auth:

Re: [389-users] import private key

2009-12-17 Thread Rob Crittenden
Mikael Kermorgant wrote: Hello, I've asked for a bunch of certificate lately, issuing certificate request with openssl for all of them. Unfortunately, I forgot that the procedure for installing a certificate in 389ds was to issue the certificate request with its own tools. Is there an easy way

Re: [389-users] Multimaster replication out of sync

2009-12-17 Thread Rich Megginson
Mitja Mihelič wrote: On 12/12/2009 12:06 AM, Rich Megginson wrote: Mitja Mihelič wrote: On 12/07/2009 05:18 PM, Rich Megginson wrote: Mitja Mihelic wrote: Hi! We have two instances of the DS in a multimaster replication setup. We had to restore the database of one of the servers from bac

Re: [389-users] generate certificate request with certutil

2009-12-17 Thread muzzol
2009/12/17 Rob Crittenden : > -S generates a certificate using a CA from the same database. You want to > create a Certificiate Signing Request (CSR). Try this: > > certutil -R -s "CN=testserver.example.com" -d . -a > > This will produce a base64-encoded CSR that you can pass along to your CA. > t