On 02/18/2013 05:04 PM, Sascha Ziemann wrote:

I am looking for the right DN in the cn=config tree for the following options of the legacy slapd.conf file:

TLSCertificateFile /path/to/server-certificate.pem TLSCertificateKeyFile /path/to/private-key.pem TLSCACertificateFile /path/to/CA-certificates

Where do I have to put the path names?

Maybe someone can update the FAQ:

http://www.openldap.org/faq/data/cache/185.html

I'm not sure if this is what you are looking for but I use these cn=config settings in the ldif:

olcTLSCACertificateFile: /etc/pki/tls/certs/ca.crt olcTLSCertificateFile: /etc/pki/tls/certs/server.crt olcTLSCertificateKeyFile: /etc/pki/tls/private/server.key

More info in man slapd-config.

Regards, Patrick