Obtaining and Installing Server Certificates
343
• If the certificate database does not have the certificate authority (CA) certificate. See
Section 11.2,
“Obtaining and Installing Server Certificates”
for information on using certificates.
• The server does not support Start TLS as an extended operation.
For SDK libraries used in client programs, if a session is already in TLS mode and Start TLS is
requested, then the connection continues to be in secure mode but prints the error
"DSA is
unwilling to perform"
.
11.2. Obtaining and Installing Server Certificates
Before the Directory Server can be set to run in TLS/SSL, server and CA certificates must be properly
configured in the Directory Server. If a server certificate has already been generated for the Directory
Server instance and the issuing certificate authority (CA) is already trusted by the Directory Server,
begin setting up TLS/SSL as described in
Section 11.4, “Starting the Server with TLS/SSL Enabled”
.
Obtaining and installing certificates consists of the following steps:
1. Generate a certificate request.
2. Send the certificate request to a certificate authority.
3. Install the server certificate.
4. Set the Directory Server to trust the certificate authority.
5. Confirm that the certificates are installed.
Two wizards automate the process of creating a certificate database and of installing the key-pair. The
Certificate Request Wizard
in the Directory Server Console can generate a certificate request and
send it to a certificate authority. The
Certificate Install Wizard
in the Directory Server Console can
then install the server certificate and the CA certificate.
Summary of Contents for DIRECTORY SERVER 8.0
Page 18: ...xviii ...
Page 29: ...Configuring the Directory Manager 11 6 Enter the new password and confirm it 7 Click Save ...
Page 30: ...12 ...
Page 112: ...94 ...
Page 128: ...110 ...
Page 190: ...Chapter 6 Managing Access Control 172 4 Click New to open the Access Control Editor ...
Page 224: ...206 ...
Page 324: ...306 ...
Page 334: ...316 ...
Page 358: ...340 ...
Page 410: ...392 ...
Page 420: ...402 ...
Page 444: ...426 ...
Page 454: ...436 ...
Page 464: ...446 ...
Page 484: ...466 ...
Page 512: ...494 ...
Page 522: ...504 ...