Fedora directory users - Jan 2008 - Certutil procedure Incorrect & not adding Certificates to CA Certs?

http://www.redhat.com/docs/manuals/dir-server/ag/8.0/certutil-procedure.
html

This procedure seems to contain errors some errors, mostly only
capitalization errors, but none the less they probably should be fixed

10. should be
certutil -L -d . -n "CA certificate" -a > cacert.asc 
ie. NOT Certificate with a Capital C
certutil -L -d . -n "CA Certificate" -a > cacert.asc

Also 

11. has the same problem it should be 
pk12util -d . -o cacert.pk12 -n "CA certificate"

Also

The procedure creates 2 Server Certs and no CA Certs can anyone please
confirm the correct commands to add the certificates to the CA Certs
rather then the Server Certs


I''m also getting issues when using the setupssl2.sh script (
http://directory.fedoraproject.org/download/setupssl2.sh ) on the wiki
(I am running version Fedora Directory Server 1.1 on Centos 5.1 from the
Fedora 6 yum repositories using the procedure
http://directory.fedoraproject.org/wiki/Download#Enterprise_Linux_5 )



Regards,

Anthony

Anthony Giggins wrote:
> http://www.redhat.com/docs/manuals/dir-server/ag/8.0/certutil-procedure.
> html
>
> This procedure seems to contain errors some errors, mostly only
> capitalization errors, but none the less they probably should be fixed
>
> 10. should be
> certutil -L -d . -n "CA certificate" -a > cacert.asc 
> ie. NOT Certificate with a Capital C
> certutil -L -d . -n "CA Certificate" -a > cacert.asc
>
> Also 
>
> 11. has the same problem it should be 
> pk12util -d . -o cacert.pk12 -n "CA certificate"
>   
Thanks.  I''ve created
https://bugzilla.redhat.com/show_bug.cgi?id=430103
for these issues.
> Also
>
> The procedure creates 2 Server Certs and no CA Certs
No, it does create a CA cert and a Server Cert.
> can anyone please
> confirm the correct commands to add the certificates to the CA Certs
> rather then the Server Certs
>   
"add the certificates to the CA Certs"?
>
> I''m also getting issues when using the setupssl2.sh script (
> http://directory.fedoraproject.org/download/setupssl2.sh ) on the wiki
> (I am running version Fedora Directory Server 1.1 on Centos 5.1 from the
> Fedora 6 yum repositories using the procedure
> http://directory.fedoraproject.org/wiki/Download#Enterprise_Linux_5 )
>   
What issues are you getting?
>
>
> Regards,
>
> Anthony
>
>
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>

> Rich Megginson wrote:
> 
> Anthony Giggins wrote:
> >
http://www.redhat.com/docs/manuals/dir-server/ag/8.0/certutil-procedure.
> > html
> >
> > This procedure seems to contain errors some errors, mostly only
> > capitalization errors, but none the less they probably should be
fixed
> >
> > 10. should be
> > certutil -L -d . -n "CA certificate" -a > cacert.asc
> > ie. NOT Certificate with a Capital C
> > certutil -L -d . -n "CA Certificate" -a > cacert.asc
> >
> > Also
> >
> > 11. has the same problem it should be
> > pk12util -d . -o cacert.pk12 -n "CA certificate"
> >
> Thanks.  I''ve created
https://bugzilla.redhat.com/show_bug.cgi?id=430103
> for these issues.
Thank You
> > Also
> >
> > The procedure creates 2 Server Certs and no CA Certs
> No, it does create a CA cert and a Server Cert.
Yes it does create both but it is adding both the "CA certificate"
&
"Server-Cert" certificates only to the Server Certs Page Under Manage
Certificates and nothing to the CA Certs under the same page. See
attached images (if the mailing list allows this) which were added using
the setupssl2.sh script but I also get the similar results when using
the procedure above
> > can anyone please
> > confirm the correct commands to add the certificates to the CA Certs
> > rather then the Server Certs
> >
> "add the certificates to the CA Certs"?
Please see the attached images also I think the information for creating
the CA certificate is missing from
http://directory.fedoraproject.org/wiki/Howto:SSL I can only find
instructions on adding the Server Certificate please correct me if I''m
wrong
> >
> > I''m also getting issues when using the setupssl2.sh script (
> > http://directory.fedoraproject.org/download/setupssl2.sh ) on the
wiki
> > (I am running version Fedora Directory Server 1.1 on Centos 5.1 from
the
> > Fedora 6 yum repositories using the procedure
> > http://directory.fedoraproject.org/wiki/Download#Enterprise_Linux_5
)
> >
> What issues are you getting?
This is explained above hopefully in enough detail

Regards,

Anthony

Anthony Giggins wrote:
>> Rich Megginson wrote:
>>     
>>> Also
>>>
>>> The procedure creates 2 Server Certs and no CA Certs
>>>       
>> No, it does create a CA cert and a Server Cert.
>>     
>
> Yes it does create both but it is adding both the "CA
certificate" &
> "Server-Cert" certificates only to the Server Certs Page Under
Manage
> Certificates and nothing to the CA Certs under the same page. See
> attached images (if the mailing list allows this) which were added using
> the setupssl2.sh script but I also get the similar results when using
> the procedure above
>   
Hmm - looks like a bug.  But at any rate, it is still a CA cert despite 
what the console says, and will correctly function as a CA cert for all 
TLS/SSL operations.
>   
>>> can anyone please
>>> confirm the correct commands to add the certificates to the CA
Certs
>>> rather then the Server Certs
>>>
>>>       
>> "add the certificates to the CA Certs"?
>>     
>
> Please see the attached images also I think the information for creating
> the CA certificate is missing from
> http://directory.fedoraproject.org/wiki/Howto:SSL I can only find
> instructions on adding the Server Certificate please correct me if
I''m
> wrong
>   
I''m not sure why the CA cert is showing up under Server Certs in the 
console, but it is indeed a CA cert and will function as such for 
TLS/SSL operations.
>   
>>> I''m also getting issues when using the setupssl2.sh script
(
>>> http://directory.fedoraproject.org/download/setupssl2.sh ) on the
>>>       
> wiki
>   
>>> (I am running version Fedora Directory Server 1.1 on Centos 5.1
from
>>>       
> the
>   
>>> Fedora 6 yum repositories using the procedure
>>> http://directory.fedoraproject.org/wiki/Download#Enterprise_Linux_5
>>>       
> )
>   
>> What issues are you getting?
>>     
>
> This is explained above hopefully in enough detail
>
> Regards,
>
> Anthony
>   
>
> ------------------------------------------------------------------------
>
>
> ------------------------------------------------------------------------
>
> ------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>