How can I enable SSL on Novell e-directory Server and make the LDAP Adapter connect through the SSL channel?

How can I enable SSL on Novell e-directory Server and make the LDAP Adapter connect through the SSL channel?

book

Article ID: KB0087308

calendar_today

Updated On:

Products Versions
TIBCO ActiveMatrix BusinessWorks Plug-in for LDAP -
Not Applicable -

Description

Resolution:
Follow the below Steps to enable SSL on Novell Server

1.  In the Novell Server, Take the properties of the object “LDAP Server” and check the value of the attribute “LDAP Enable SSL”. It should be true to make a connection with the Server through SSL channel.
2. Check the SSL port number also.

Design Time configuration Steps needed for LDAP Adapter

To make the adapter a design time connection with Novell Server through SSL channel, we need to make some keystore, for the same .pem or, der certificate file is needed.

Step1:
In case of Novell server installed to enable encrypted connection, there will be automatically created .pem certificates under the folder &ltNOVELL_HOME>\NDS\DIBFiles\CertServ\KMOCache (say : UwBTAEwAIABDAEUAUgBUAEkARgBJAEMAQQBUAEUARABOAFMA.pem)

Step2:
Convert this file to .der file. Command for the same is,
openssl.bat x509 -inform PEM -outform DER  -in <.pem file path with file name> -out cacert.der

Step3: To make the keystore
C:\tibco\jre\1.5.0\bin&gtkeytool -import -v -alias CAcert -file C:\tibco\adapter\a
dldap\5.4\tools\openssl\cacert.der -keystore C:\tibco\jre\1.5.0\lib\security\cacerts.

Step4: The above command will prompt you to enter the keystore password (eg: changeit), enter the same and trust the certificate when it ask to do the same.

Run Time configuration Steps needed for LDAP Adapter

Step1: Prepare the certificate database, command for the same is
certutil.bat -N -d C:\tibco\adapter\adldap\5.4\certificates

Step 2: Add the certificate to the security database, command for the same is
certutil.bat -A -n CAcert -t "CTP,," -i C:\tibco\adapter\adldap\5.4\tools\openssl\cacert.der –d C:\tibco\adapter\adldap\5.4\certificates

Step 3: List the certificate and check if the certificate has been added successfully using the below command and verify the certificate.
certutil.bat -L -d C:\tibco\adapter\adldap\5.4\certificates

Issue/Introduction

How can I enable SSL on Novell e-directory Server and make the LDAP Adapter connect through the SSL channel?