Problem with Certificate Loading

[Kevin Hamilton <kh...@umem.org>]

Hello,

My name is Kevin Hamilton and I am currently attempting to set up
ApacheDS 2.0.0-M2 on a linux server.

When I try to set up SSL encryption, it claims that my certificate is
not valid, and prompts me to accept it or not. When I hit yes, it
allows me to log on to the LDAP.

However, when I try to connect via ldaps:// using PHP, it does not
connect to the server and gives an error that the certificate is not
valid.

I have a valid certificate from my website that seemingly would work
if I changed it.

I narrowed down the certificate location to the uid=admin,ou=system entry.

I click on certificate and load in my site's valid certificate. But
when I close out of Apache Directory Studio and come back in, it has
reverted back to the original certificate. Also, in the rare cases
where it hasn't reverted, the publickey/privatekey entries have not
updated, so it still fails.

How can I add my certificate to the server so it works well with php and ssl?

Thanks in advance,
Kevin

Re: Problem with Certificate Loading

[Pierre-Arnaud Marcelot <pa...@marcelot.net>]

Hi Kevin,

What is the format of the certificate you're trying to import?

Thanks,
Pierre-Arnaud

On 7 sept. 2011, at 22:34, Kevin Hamilton wrote:

> In Apache Directory Studio (where I am viewing and editing my
> certificates, it gives them in an encrypted binary fashion and does
> not allow me to import my normal plaintext keys. Doing this crashes
> apacheds. How can I go about changing the way the apacheds encrypts
> the keys?
> 
> 
> thanks,
> Kevin
> On Wed, Sep 7, 2011 at 11:09 AM, Kiran Ayyagari <ka...@apache.org> wrote:
>> Hi Kevin,
>> 
>>    You need to manually upload the keys also as you did with the
>> certificate in server
>>     (note that closing and opening studio will not impact the server
>> at all, you might already be aware of this but just to make it clear)
>> 
>>    Let us know if you still face any issue after doing this
>> 
>> On Wed, Sep 7, 2011 at 8:33 PM, Kevin Hamilton <kh...@umem.org> wrote:
>>> Hello,
>>> 
>>> My name is Kevin Hamilton and I am currently attempting to set up
>>> ApacheDS 2.0.0-M2 on a linux server.
>>> 
>>> When I try to set up SSL encryption, it claims that my certificate is
>>> not valid, and prompts me to accept it or not. When I hit yes, it
>>> allows me to log on to the LDAP.
>>> 
>>> However, when I try to connect via ldaps:// using PHP, it does not
>>> connect to the server and gives an error that the certificate is not
>>> valid.
>>> 
>>> I have a valid certificate from my website that seemingly would work
>>> if I changed it.
>>> 
>>> I narrowed down the certificate location to the uid=admin,ou=system entry.
>>> 
>>> I click on certificate and load in my site's valid certificate. But
>>> when I close out of Apache Directory Studio and come back in, it has
>>> reverted back to the original certificate. Also, in the rare cases
>>> where it hasn't reverted, the publickey/privatekey entries have not
>>> updated, so it still fails.
>>> 
>>> How can I add my certificate to the server so it works well with php and ssl?
>>> 
>>> Thanks in advance,
>>> Kevin
>>> 
>> 
>> 
>> 
>> --
>> Kiran Ayyagari
>> 

Re: Problem with Certificate Loading

[Kevin Hamilton <kh...@umem.org>]

In Apache Directory Studio (where I am viewing and editing my
certificates, it gives them in an encrypted binary fashion and does
not allow me to import my normal plaintext keys. Doing this crashes
apacheds. How can I go about changing the way the apacheds encrypts
the keys?


thanks,
Kevin
On Wed, Sep 7, 2011 at 11:09 AM, Kiran Ayyagari <ka...@apache.org> wrote:
> Hi Kevin,
>
>    You need to manually upload the keys also as you did with the
> certificate in server
>     (note that closing and opening studio will not impact the server
> at all, you might already be aware of this but just to make it clear)
>
>    Let us know if you still face any issue after doing this
>
> On Wed, Sep 7, 2011 at 8:33 PM, Kevin Hamilton <kh...@umem.org> wrote:
>> Hello,
>>
>> My name is Kevin Hamilton and I am currently attempting to set up
>> ApacheDS 2.0.0-M2 on a linux server.
>>
>> When I try to set up SSL encryption, it claims that my certificate is
>> not valid, and prompts me to accept it or not. When I hit yes, it
>> allows me to log on to the LDAP.
>>
>> However, when I try to connect via ldaps:// using PHP, it does not
>> connect to the server and gives an error that the certificate is not
>> valid.
>>
>> I have a valid certificate from my website that seemingly would work
>> if I changed it.
>>
>> I narrowed down the certificate location to the uid=admin,ou=system entry.
>>
>> I click on certificate and load in my site's valid certificate. But
>> when I close out of Apache Directory Studio and come back in, it has
>> reverted back to the original certificate. Also, in the rare cases
>> where it hasn't reverted, the publickey/privatekey entries have not
>> updated, so it still fails.
>>
>> How can I add my certificate to the server so it works well with php and ssl?
>>
>> Thanks in advance,
>> Kevin
>>
>
>
>
> --
> Kiran Ayyagari
>

Re: Problem with Certificate Loading

[Kiran Ayyagari <ka...@apache.org>]

Hi Kevin,

    You need to manually upload the keys also as you did with the
certificate in server
     (note that closing and opening studio will not impact the server
at all, you might already be aware of this but just to make it clear)

    Let us know if you still face any issue after doing this

On Wed, Sep 7, 2011 at 8:33 PM, Kevin Hamilton <kh...@umem.org> wrote:
> Hello,
>
> My name is Kevin Hamilton and I am currently attempting to set up
> ApacheDS 2.0.0-M2 on a linux server.
>
> When I try to set up SSL encryption, it claims that my certificate is
> not valid, and prompts me to accept it or not. When I hit yes, it
> allows me to log on to the LDAP.
>
> However, when I try to connect via ldaps:// using PHP, it does not
> connect to the server and gives an error that the certificate is not
> valid.
>
> I have a valid certificate from my website that seemingly would work
> if I changed it.
>
> I narrowed down the certificate location to the uid=admin,ou=system entry.
>
> I click on certificate and load in my site's valid certificate. But
> when I close out of Apache Directory Studio and come back in, it has
> reverted back to the original certificate. Also, in the rare cases
> where it hasn't reverted, the publickey/privatekey entries have not
> updated, so it still fails.
>
> How can I add my certificate to the server so it works well with php and ssl?
>
> Thanks in advance,
> Kevin
>



-- 
Kiran Ayyagari