[Users] Need help in adding certificate

Klaus Darilion klaus.mailinglists at pernau.at
Tue Oct 3 11:16:09 CEST 2006


Ferianto siregar wrote:
> Dear all,
>  
> Thank you very much for your time.
> All, I read from tls.html (www.openser.org <http://www.openser.org>) 
> that for making good certificate, we must add rootCA to calist file by 
> using:
>  
> cat add_cacert.pem >> calist.pem
>  
> 1.When I try to run it, I got error message. It can not execute? Why?
>  
> It says :"There is no command add_cacert.pem"

Of course there is no command - it is a parameter for the "cat" command.

You have to add all CA certificates the calist.pem (or whatever file you 
choose with the tls_ca_list="/mycerts/certs/ca_list.pem" directive.

You can either use do it like you said, or you can open the file in a 
text editor and append the new CA cert to the existing CA certs.


>  
> Does that command just make new file named "calist.pem"? (There is no 
> difference between cacert.pem)
>  
> 2. I compile TLS with openssl.0.9.7a. The openssl-0.9.7.a packet, I 
> got when installing Redhat. 
> But, How can I know that TLS that I have build using openssl or ssl (for 
> security) version? or How can we run openssl or ssl?


$ ldd /usr/sbin/openser
  libdl.so.2 => /lib/tls/libdl.so.2 (0xb7f47000)
  libresolv.so.2 => /lib/tls/libresolv.so.2 (0xb7f34000)
  libssl.so.0.9.7 => /usr/lib/i686/cmov/libssl.so.0.9.7 (0xb7f03000)
  libcrypto.so.0.9.7 => /usr/lib/i686/cmov/libcrypto.so.0.9.7 (0xb7e04000)
  libc.so.6 => /lib/tls/libc.so.6 (0xb7ccf000)
  /lib/ld-linux.so.2 => /lib/ld-linux.so.2 (0xb7f52000)



>  
> I do hope anybody can help me. Please..Thank you very much.
>  
> Regards,
>  
>  
>  
> Ferianto
> 
> ------------------------------------------------------------------------
> Stay in the know. Pulse on the new Yahoo.com. Check it out. 
> <http://us.rd.yahoo.com/evt=42974/*http://www.yahoo.com/preview>
> 
> 
> ------------------------------------------------------------------------
> 
> _______________________________________________
> Users mailing list
> Users at openser.org
> http://openser.org/cgi-bin/mailman/listinfo/users





More information about the sr-users mailing list