19 Nov
2008
19 Nov
'08
9:19 a.m.
----- "Ivan Ordonez" iordonez@nature.berkeley.edu wrote:
Looking at the debug log, it is expired. It puzzle me because the certs on the other two machine are working correctly.
Check their expiry dates with:
openssl x509 -in /usr/local/etc/openldap/ldap-slave_cert.pem -text
Since this is the case (certificate expires), is it safe to create a new one for this machine?
Of course, then sign it with the cacert, something like:
./CA.sh -newreq ./CA.sh -sign
--
Kind Regards,
Gavin Henry.
OpenLDAP Engineering Team.
E ghenry@OpenLDAP.org
Community developed LDAP software.
http://www.openldap.org/project/