Re: Connect Solaris ldapclient to a Oracle internet directory
Date: Thu, 03 Jul 2008 13:27:48 -0400
Message-ID: <g4j26k$dam$1@mailhub227.itcs.purdue.edu>
Denis wrote:
> Now I would like to use SSL. The Solaris client needs PKCS12 formated
> key.db files. My problem is to get this keys in the right format.
>
On Solaris 10 if you have the CA certificate that signed your LDAP server's certificate and it is base64 encoded then the following commands will create the certificate database, import the certificate, and list the contents of the database, see
http://www.mozilla.org/projects/security/pki/nss/tools/certutil.html
/usr/sfw/bin/certutil -N -d /var/ldap
# the following command is all one line
/usr/sfw/bin/certutil -A -d /var/ldap -n name_of_cert_in_db -t C,, -a -i
/path/to/cert/cert.txt
/usr/sfw/bin/certutil -L -d /var/ldap
Neal Received on Thu Jul 03 2008 - 12:27:48 CDT