ClearOS Bug Tracker


View Revisions: Issue #20811 All Revisions ] Back to Issue ]
Summary 0020811: Fix OpenLDAP certificate issue
Revision 2018-08-14 14:42 by user2
Description The bootstrap certificates can be mismatched in some cases. Here's the problematic bit of code:

KEY_SOURCE=/etc/pki/CA/bootstrap.key
KEY=/etc/openldap/cacerts/key.pem

if [ ! -s "$KEY" ]; then
    logger -p local6.notice -t installer "app-openldap-core - prepping server key"
    cp $KEY_SOURCE $KEY
    chown root.ldap $KEY
    chmod 640 $KEY
fi

CRT_SOURCE=/etc/pki/CA/bootstrap.crt
CRT=/etc/openldap/cacerts/cert.pem

if [ ! -s "$CRT" ]; then
    logger -p local6.notice -t installer "app-openldap-core - prepping server certificate"
    cp $CRT_SOURCE $CRT
    chown root.ldap $CRT
    chmod 640 $CRT
fi


The key/pair should always be copied at the same time.

Revision 2018-07-18 09:39 by user2
Description -