Obtaining And Installing Server Certificates - Red Hat DIRECTORY SERVER 8.0 - ADMINISTRATION Administration Manual

Obtaining and Installing Server Certificates

Section 11.2,
• If the certificate database does not have the certificate authority (CA) certificate. See
"Obtaining and Installing Server Certificates"
for information on using certificates.
• The server does not support Start TLS as an extended operation.
For SDK libraries used in client programs, if a session is already in TLS mode and Start TLS is
requested, then the connection continues to be in secure mode but prints the error "DSA is
unwilling to perform".
11.2. Obtaining and Installing Server Certificates
Before the Directory Server can be set to run in TLS/SSL, server and CA certificates must be properly
configured in the Directory Server. If a server certificate has already been generated for the Directory
Server instance and the issuing certificate authority (CA) is already trusted by the Directory Server,
Section 11.4, "Starting the Server with TLS/SSL Enabled".
begin setting up TLS/SSL as described in
Obtaining and installing certificates consists of the following steps:
1. Generate a certificate request.
2. Send the certificate request to a certificate authority.
3. Install the server certificate.
4. Set the Directory Server to trust the certificate authority.
5. Confirm that the certificates are installed.
Two wizards automate the process of creating a certificate database and of installing the key-pair. The
Certificate Request Wizard in the Directory Server Console can generate a certificate request and
send it to a certificate authority. The Certificate Install Wizard in the Directory Server Console can
then install the server certificate and the CA certificate.
343