Re: Error when try modify olcTLS*

To: Quanah Gibson-Mount <quanah@symas.com>

Subject: Re: Error when try modify olcTLS*

From: Igor Sousa <igorvolt@gmail.com>

Date: Fri, 19 Jul 2019 12:02:39 -0300

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to :cc; bh=YpwdYOoohh/n/HR0Pch/Q9uiTCCgJyJeLAg30Q+XoBI=; b=nqd9P7wAX3d1G9K+gklCJcMOAILINZaG2O7LFfHrR9Zmmrs6orDMijJkI335M82YsO SL+Tm36mFsgoQHyfXuvbKf0F8jjpt3yN5tjRffXNdw2z5YBcUJPbwuAy6GjNq0XIPIvL 0LpeCiTI7MBuySAmwUjfZyABLQQ8N2mSg/LslwDF+ftp38e6O2NA57NRb220V6C6p1Cf UXb4RfRbmqBH45L2f4P4GFZNL8AnZvz8CaLZPcKTZ/P+azWuhVXMPDXuvv19cCoMui/S 87PIIi4BgAInwzPeEMLZVZBkmUJQ/b9nM+TcFR7u52viKd0rRo1G96j4kEeD+o9Pzc0n K5Ow==

In-reply-to: <0DBBAC4F8151F9DFD2CCA8D6@192.168.1.39>

References: <CAAg2ztWXNS0=G1zT=BO2KPTMzC0gc0Q+7ecRH_8N8gawvbrTVg@mail.gmail.com> <ECDFD8D8BD5A32677D782E4D@192.168.1.39> <CAAg2ztUUYCbw=7UD5eoLsPzyOC9FQLJN+gEjycdRqiLOnxtPEQ@mail.gmail.com> <758427B3CD8C6FF7EDCBA715@[192.168.1.39]> <811d67d9-9bef-433a-4844-fda99326aae9@symas.com> <CAAg2ztXPwc+Rydjt0Rw4+Pa6vUGt6ycDHfjw3v3tqQ_xb+W3pw@mail.gmail.com> <CAAg2ztV-oEBVia+P+N+JQB_pD+XzOJ8t_41sQTBbKhywWF+msQ@mail.gmail.com> <cdabbdfd-e2de-260e-f0e0-bf997fc3fcdf@symas.com> <CAAg2ztWMayH_6_x1DEti_B9TLcm9CXG+5gwWjFZwuR9-DC4E4w@mail.gmail.com> <138E3C1067F82ACFA51F5275@[192.168.1.39]> <0DBBAC4F8151F9DFD2CCA8D6@192.168.1.39>

Hi everybody,

I would like to apologize me about this email discussion, in specially to Quanah and Howard. After a ton of emails sent, specially the last Quanah email, I've finally understood my error. Due it be a beginner error, I'm very embarrassed to importune you about it.

Then, I would like to apologize me with Quanah, Howard and everyone on openldap-technical@openldap.org list about time spent in this problem.

Finally, I would like thank all involved that has helped me to solve my problem.

OBS: I've removed -aes256 when I've generated server key aiming no encrypting the key. Then I've got to add all olcTLS* entries with ldapmodify and ldif file described in previous emails.

--
Igor Sousa

Em qui, 18 de jul de 2019 às 17:35, Quanah Gibson-Mount <quanah@symas.com> escreveu:

--On Thursday, July 18, 2019 1:08 PM -0700 Quanah Gibson-Mount
<quanah@symas.com> wrote:

>> build@c7rpm:/home/build/git/rheldap/RHEL7_x86_64/BUILD...lapd
>> Jul 18 11:55:29 localhost.localdomain slapd[2133]: main: TLS init def ctx
>> failed: -1
>> Jul 18 11:55:29 localhost.localdomain slapd[2133]: Enter PEM pass phrase:
>
> This clearly indicates your key file is password protected, which is not
> supported.

To be clear, it's not supported to use a password protected key file and
then try and start slapd via an automated init system such as systemd. To
use a password protected key file requires that you start slapd manually so
you can provide the password as part of the startup process so slapd can
access it.

Regards,
Quanah

--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>