[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Multiple certificates in slapd

To: Olivier Nicole <Olivier.Nicole@cs.ait.ac.th>
Subject: Re: Multiple certificates in slapd
From: Jarbas Peixoto Júnior <jarbas.junior@gmail.com>
Date: Tue, 24 Nov 2015 03:54:44 -0300
Cc: "openldap-technical@openldap.org" <openldap-technical@openldap.org>
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=o6caCn6hd8eTphZvm/JrSNR+HcSY33xkSli3gj/6q4c=; b=J0+KFt9z1QF9R9FSHZQpgfBeS8iJQSBS2sEgn4c/fp59+2VrDaHGuE0OIOb2hdSEcb qzPqKM7Jz31hz+fOBYYOdsGaOi/Mk45IIZ5DPFI4CH4kQJLtGiFuz2MDNHUtTYEUPvcP kQOY7//XnubIWn+cbWCaAwPQF0EssgfIgfMtUqmunMcOtxW0dd6zmFUafCU7H514whBg 7fPExKFLWqFUxtaJiC32elhHzsdGsIM1RKPj48R1Xv8k1FeVA4tW7dXHTgi77H2wFbm8 pISh3AvHI08bheRp0peaqXYvyw2zS1Kg8oi6nhHGek8LrAyKjq5pKfWEJK6e4dHrRVKY wIEQ==
In-reply-to: <wu74mgduprz.fsf@banyan.cs.ait.ac.th>
References: <wu74mgduprz.fsf@banyan.cs.ait.ac.th>

I know that I could set-up a slave server, but that would be not as
transparent s0 I'd prefer my idea of havingslapd -h
ldaps://192.168.10.1:636/ ldaps:/192.168.10.1:637/ each using a
different certificate.

I did so: I put two ldap slave servers (server-server-new and server-old). On the server-old I put the old certificate on the server-new I put the new certificate.

The old applications I point to the server-old and the other applications I use the server-new.

Sincerely, jarbas

References:
- Multiple certificates in slapd
  - From: Olivier Nicole <Olivier.Nicole@cs.ait.ac.th>

Prev by Date: Re: Problem with "force user to password reset at first login
Next by Date: RE: Getting around the single-threaded syncrepl model?
Index(es):
- Chronological
- Thread