thr3ads.net - Fedora directory users - [Fedora-directory-users] SSL [Mar 2008]

If this information is useful, please help other people find it:
Share via:

Anand Vaddarapu

2008-Mar-27 04:59 UTC

[Fedora-directory-users] SSL

Hi,

After enabling SSL with console using the procedure *
http://directory.fedoraproject.org/wiki/Howto:SSL#Console_SSL_Information* i
am getting these following error messages when i am trying to login into
directory server in the console. SSL is enabled in both the admin console &
the Ldap server
>From logs: [27/Mar/2008:14:56:24 +1100] conn=47 fd=66 slot=66 SSL connection from
10.50.5.81 to 10.50.1.24
[27/Mar/2008:14:56:24 +1100] conn=47 op=-1 fd=66 closed - SSL peer cannot
verify your certificate.

we are these when starting the Ldap server

27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to unwrap key for
cipher AES
[27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for cipher AES in
attrcrypt_cipher_init
[27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher AES in
attrcrypt_init
[27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to unwrap key
for cipher AES
[27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for cipher AES in
attrcrypt_cipher_init
[27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher AES in
attrcrypt_init
[27/Mar/2008:14:45:05 +1100] - slapd started.  Listening on All Interfaces
port 389 for LDAP requests
[27/Mar/2008:14:45:05 +1100] - Listening on All Interfaces port 636 for
LDAPS requests



Console error message:

netscape.ldap.LDAPException:JSSSocketFactory.makeSocket devil.wcg.net.au:636,
SSL_ForceHandshake failed: (-8054) unknown error (91)

Help Appreciated.

Thanks

Rich Megginson

2008-Mar-31 17:57 UTC

head link

Re: [Fedora-directory-users] SSL

Anand Vaddarapu wrote:> Hi,
>
> After enabling SSL with console using the procedure 
> _http://directory.fedoraproject.org/wiki/Howto:SSL#Console_SSL_Information_
> i am getting these following error messages when i am trying to login 
> into directory server in the console. SSL is enabled in both the admin 
> console & the Ldap server
>
> From logs:
>  [27/Mar/2008:14:56:24 +1100] conn=47 fd=66 slot=66 SSL connection 
> from 10.50.5.81 <http://10.50.5.81> to 10.50.1.24
<http://10.50.1.24>
> [27/Mar/2008:14:56:24 +1100] conn=47 op=-1 fd=66 closed - SSL peer 
> cannot verify your certificate.ls -al ~/.fedora-idm-console
certutil -L -d ~/.fedora-idm-console>
> we are these when starting the Ldap server
>
> 27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to unwrap 
> key for cipher AES
> [27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for cipher AES 
> in attrcrypt_cipher_init
> [27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher AES in 
> attrcrypt_init
> [27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to unwrap 
> key for cipher AES
> [27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for cipher AES 
> in attrcrypt_cipher_init
> [27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher AES in 
> attrcrypt_init
> [27/Mar/2008:14:45:05 +1100] - slapd started.  Listening on All 
> Interfaces port 389 for LDAP requests
> [27/Mar/2008:14:45:05 +1100] - Listening on All Interfaces port 636 
> for LDAPS requests
>
>
>
> Console error message:
>
> netscape.ldap.LDAPException:JSSSocketFactory.makeSocket 
> devil.wcg.net.au:636 <http://devil.wcg.net.au:636>,
SSL_ForceHandshake
> failed: (-8054) unknown error (91)
>
> Help Appreciated.
>
> Thanks
>
>
>
>
>
>
> ------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>

Anand Vaddarapu

2008-Mar-31 22:53 UTC

head link

Re: [Fedora-directory-users] SSL

Hi,

ls -al ~/.fedora-idm-console/
total 12
drwxr-xr-x  2 root root 4096 Feb 26 08:46 .
drwxr-x--- 12 root root 4096 Mar 26 16:10 ..


certutil -L -d ~/.fedora-idm-console/
certutil: function failed: security library: bad database.

Thanks




On Tue, Apr 1, 2008 at 4:57 AM, Rich Megginson <rmeggins@redhat.com>
wrote:
> Anand Vaddarapu wrote:
> > Hi,
> >
> > After enabling SSL with console using the procedure
> >
> _http://directory.fedoraproject.org/wiki/Howto:SSL#Console_SSL_Information_
> > i am getting these following error messages when i am trying to login
> > into directory server in the console. SSL is enabled in both the admin
> > console & the Ldap server
> >
> > From logs:
> >  [27/Mar/2008:14:56:24 +1100] conn=47 fd=66 slot=66 SSL connection
> > from 10.50.5.81 <http://10.50.5.81> to 10.50.1.24
<http://10.50.1.24>
> > [27/Mar/2008:14:56:24 +1100] conn=47 op=-1 fd=66 closed - SSL peer
> > cannot verify your certificate.
> ls -al ~/.fedora-idm-console
> certutil -L -d ~/.fedora-idm-console
> >
> > we are these when starting the Ldap server
> >
> > 27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to unwrap
> > key for cipher AES
> > [27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for cipher AES
> > in attrcrypt_cipher_init
> > [27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher AES in
> > attrcrypt_init
> > [27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to unwrap
> > key for cipher AES
> > [27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for cipher AES
> > in attrcrypt_cipher_init
> > [27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher AES in
> > attrcrypt_init
> > [27/Mar/2008:14:45:05 +1100] - slapd started.  Listening on All
> > Interfaces port 389 for LDAP requests
> > [27/Mar/2008:14:45:05 +1100] - Listening on All Interfaces port 636
> > for LDAPS requests
> >
> >
> >
> > Console error message:
> >
> > netscape.ldap.LDAPException:JSSSocketFactory.makeSocket
> > devil.wcg.net.au:636 <http://devil.wcg.net.au:636>,
SSL_ForceHandshake
> > failed: (-8054) unknown error (91)
> >
> > Help Appreciated.
> >
> > Thanks
> >
> >
> >
> >
> >
> >
> >
------------------------------------------------------------------------
> >
> > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users@redhat.com
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
>
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>

Rich Megginson

2008-Apr-01 19:38 UTC

head link

Re: [Fedora-directory-users] SSL

certutil -L -d /etc/dirsrv/slapd-instance
certutil -L -d /etc/dirsrv/admin-serv

Anand Vaddarapu wrote:> Hi,
>  
> ls -al ~/.fedora-idm-console/
> total 12
> drwxr-xr-x  2 root root 4096 Feb 26 08:46 .
> drwxr-x--- 12 root root 4096 Mar 26 16:10 ..
>
>
> certutil -L -d ~/.fedora-idm-console/
> certutil: function failed: security library: bad database.
>
> Thanks
>
>
>
>
> On Tue, Apr 1, 2008 at 4:57 AM, Rich Megginson <rmeggins@redhat.com 
> <mailto:rmeggins@redhat.com>> wrote:
>
>     Anand Vaddarapu wrote:
>     > Hi,
>     >
>     > After enabling SSL with console using the procedure
>     >
>    
_http://directory.fedoraproject.org/wiki/Howto:SSL#Console_SSL_Information_
>     > i am getting these following error messages when i am trying to
>     login
>     > into directory server in the console. SSL is enabled in both the
>     admin
>     > console & the Ldap server
>     >
>     > From logs:
>     >  [27/Mar/2008:14:56:24 +1100] conn=47 fd=66 slot=66 SSL connection
>     > from 10.50.5.81 <http://10.50.5.81>
<http://10.50.5.81> to
>     10.50.1.24 <http://10.50.1.24> <http://10.50.1.24>
>     > [27/Mar/2008:14:56:24 +1100] conn=47 op=-1 fd=66 closed - SSL peer
>     > cannot verify your certificate.
>     ls -al ~/.fedora-idm-console
>     certutil -L -d ~/.fedora-idm-console
>     >
>     > we are these when starting the Ldap server
>     >
>     > 27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to
unwrap
>     > key for cipher AES
>     > [27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for cipher
AES
>     > in attrcrypt_cipher_init
>     > [27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher AES in
>     > attrcrypt_init
>     > [27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to
>     unwrap
>     > key for cipher AES
>     > [27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for cipher
AES
>     > in attrcrypt_cipher_init
>     > [27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher AES in
>     > attrcrypt_init
>     > [27/Mar/2008:14:45:05 +1100] - slapd started.  Listening on All
>     > Interfaces port 389 for LDAP requests
>     > [27/Mar/2008:14:45:05 +1100] - Listening on All Interfaces port
636
>     > for LDAPS requests
>     >
>     >
>     >
>     > Console error message:
>     >
>     > netscape.ldap.LDAPException:JSSSocketFactory.makeSocket
>     > devil.wcg.net.au:636 <http://devil.wcg.net.au:636>
>     <http://devil.wcg.net.au:636>, SSL_ForceHandshake
>     > failed: (-8054) unknown error (91)
>     >
>     > Help Appreciated.
>     >
>     > Thanks
>     >
>     >
>     >
>     >
>     >
>     >
>     >
>    
------------------------------------------------------------------------
>     >
>     > --
>     > Fedora-directory-users mailing list
>     > Fedora-directory-users@redhat.com
>     <mailto:Fedora-directory-users@redhat.com>
>     > https://www.redhat.com/mailman/listinfo/fedora-directory-users
>     >
>
>
>     --
>     Fedora-directory-users mailing list
>     Fedora-directory-users@redhat.com
>     <mailto:Fedora-directory-users@redhat.com>
>     https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>
> ------------------------------------------------------------------------
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>

Anand Vaddarapu

2008-Apr-01 21:58 UTC

head link

Re: [Fedora-directory-users] SSL

Hi,


     #certutil -L -d /etc/dirsrv/slapd-instance
     CA certificate                                               CTu,u,u
     server-cert                                                   u,u,u
     Server-Cert                                                  u,u,u


      #certutil -L -d /etc/dirsrv/admin-serv

      CA certificate                                               CTu,u,u
      server-cert                                                   u,u,u
      Server-Cert                                                  u,u,u

Thanks



On Wed, Apr 2, 2008 at 6:38 AM, Rich Megginson <rmeggins@redhat.com>
wrote:
> certutil -L -d /etc/dirsrv/slapd-instance
> certutil -L -d /etc/dirsrv/admin-serv
>
> Anand Vaddarapu wrote:
> > Hi,
> >
> > ls -al ~/.fedora-idm-console/
> > total 12
> > drwxr-xr-x  2 root root 4096 Feb 26 08:46 .
> > drwxr-x--- 12 root root 4096 Mar 26 16:10 ..
> >
> >
> > certutil -L -d ~/.fedora-idm-console/
> > certutil: function failed: security library: bad database.
> >
> > Thanks
> >
> >
> >
> >
> > On Tue, Apr 1, 2008 at 4:57 AM, Rich Megginson <rmeggins@redhat.com
> > <mailto:rmeggins@redhat.com>> wrote:
> >
> >     Anand Vaddarapu wrote:
> >     > Hi,
> >     >
> >     > After enabling SSL with console using the procedure
> >     >
> >
> _http://directory.fedoraproject.org/wiki/Howto:SSL#Console_SSL_Information_
> >     > i am getting these following error messages when i am trying
to
> >     login
> >     > into directory server in the console. SSL is enabled in both
the
> >     admin
> >     > console & the Ldap server
> >     >
> >     > From logs:
> >     >  [27/Mar/2008:14:56:24 +1100] conn=47 fd=66 slot=66 SSL
connection
> >     > from 10.50.5.81 <http://10.50.5.81>
<http://10.50.5.81> to
> >     10.50.1.24 <http://10.50.1.24> <http://10.50.1.24>
> >     > [27/Mar/2008:14:56:24 +1100] conn=47 op=-1 fd=66 closed - SSL
peer
> >     > cannot verify your certificate.
> >     ls -al ~/.fedora-idm-console
> >     certutil -L -d ~/.fedora-idm-console
> >     >
> >     > we are these when starting the Ldap server
> >     >
> >     > 27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed to
> unwrap
> >     > key for cipher AES
> >     > [27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for
cipher
> AES
> >     > in attrcrypt_cipher_init
> >     > [27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher
AES in
> >     > attrcrypt_init
> >     > [27/Mar/2008:14:45:04 +1100] - attrcrypt_unwrap_key: failed
to
> >     unwrap
> >     > key for cipher AES
> >     > [27/Mar/2008:14:45:04 +1100] - Failed to retrieve key for
cipher
> AES
> >     > in attrcrypt_cipher_init
> >     > [27/Mar/2008:14:45:04 +1100] - Failed to initialize cipher
AES in
> >     > attrcrypt_init
> >     > [27/Mar/2008:14:45:05 +1100] - slapd started.  Listening on
All
> >     > Interfaces port 389 for LDAP requests
> >     > [27/Mar/2008:14:45:05 +1100] - Listening on All Interfaces
port
> 636
> >     > for LDAPS requests
> >     >
> >     >
> >     >
> >     > Console error message:
> >     >
> >     > netscape.ldap.LDAPException:JSSSocketFactory.makeSocket
> >     > devil.wcg.net.au:636 <http://devil.wcg.net.au:636>
> >     <http://devil.wcg.net.au:636>, SSL_ForceHandshake
> >     > failed: (-8054) unknown error (91)
> >     >
> >     > Help Appreciated.
> >     >
> >     > Thanks
> >     >
> >     >
> >     >
> >     >
> >     >
> >     >
> >     >
> >
> ------------------------------------------------------------------------
> >     >
> >     > --
> >     > Fedora-directory-users mailing list
> >     > Fedora-directory-users@redhat.com
> >     <mailto:Fedora-directory-users@redhat.com>
> >     >
https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >     >
> >
> >
> >     --
> >     Fedora-directory-users mailing list
> >     Fedora-directory-users@redhat.com
> >     <mailto:Fedora-directory-users@redhat.com>
> >     https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
> >
> >
------------------------------------------------------------------------
> >
> > --
> > Fedora-directory-users mailing list
> > Fedora-directory-users@redhat.com
> > https://www.redhat.com/mailman/listinfo/fedora-directory-users
> >
>
>
> --
> Fedora-directory-users mailing list
> Fedora-directory-users@redhat.com
> https://www.redhat.com/mailman/listinfo/fedora-directory-users
>
>

Fedora directory users - Mar 2008 - SSL

[Fedora-directory-users] SSL

Re: [Fedora-directory-users] SSL

Re: [Fedora-directory-users] SSL

Re: [Fedora-directory-users] SSL

Re: [Fedora-directory-users] SSL