[prev in list] [next in list] [prev in thread] [next in thread] 

List:       openldap-technical
Subject:    Re: SSL certificate install
From:       Howard Chu <hyc () symas ! com>
Date:       2023-12-14 9:46:18
Message-ID: ac27d9cc-a936-a427-b482-ae7380b8c944 () symas ! com
[Download RAW message or body]

Stefan Kania wrote:
> Syntax error? Open your file with vi and do a "set: list" and you will see \
> additional blanks and tabstops. 
> 
> Am 13.12.23 um 14:28 schrieb Jean-Luc Chandezon:
> > > 
> > > You are missing "changetype: modify"
> > > 
> > > this is how it should look
> > > -------------
> > > dn: cn=config
> > > changetype: modify
> > > add: olcTLSCertificateFile
> > > olcTLSCertificateFile: /opt/symas/etc/openldap/example-net-cert.pem
> > > -
> > > add: olcTLSCertificateKeyFile
> > > olcTLSCertificateKeyFile: /opt/symas/etc/openldap/example-net-key.pem
> > > -
> > > add: olcTLSCACertificateFile
> > > olcTLSCACertificateFile: /opt/symas/etc/openldap/cacert.pem
> > > 
> > > -------------
> > > Stefan
> > > 
> > 
> > Thank you Stefan!
> > Sorry for the mistake due to last changes.
> > 
> > Our ldf file content is:
> > 
> > dn: cn=config
> > changetype: modify
> > add: olcTLSCACertificateFile
> > olcTLSCACertificateFile: /etc/ssl/certs/LEXP_Infra_CA1.pem
> > -
> > add: olcTLSCertificateKeyFile
> > olcTLSCertificateKeyFile: /etc/ssl/private/annuaire.lexp.fr.key
> > -
> > add: olcTLSCertificateFile
> > olcTLSCertificateFile: /etc/ssl/certs/annuaire.lexp.fr.pem
> > 
> > 
> > with the request:
> > ldapmodify -Y EXTERNAL -H ldapi:/// -f /root/01-SSL.ldif
> > result:
> > modifying entry "cn=config"
> > ldap_modify: Other (e.g., implementation specific) error (80)
> > 
> > Any idea?
> > 
> > Please find log content bellow
> > 
> > 023-12-13T14:26:31.500282+01:00 bea-chicago slapd[63531]: #011#011one value, \
> > length 33 2023-12-13T14:26:31.500380+01:00 bea-chicago slapd[63531]: #011add: \
> > olcTLSCertificateKeyFile 2023-12-13T14:26:31.500452+01:00 bea-chicago \
> > slapd[63531]: #011#011one value, length 37

As always - set a higher debug level and examine the debug output. Not the syslog \
output. syslog is for recording routine operation, not for isolating problems. Use \
the debug output for troubleshooting.

-- 
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/


[prev in list] [next in list] [prev in thread] [next in thread]