book
Article ID: KB0087308
calendar_today
Updated On:
Description
Resolution:
Follow the below Steps to enable SSL on Novell Server
1. In the Novell Server, Take the properties of the object “LDAP Server” and check the value of the attribute “LDAP Enable SSL”. It should be true to make a connection with the Server through SSL channel.
2. Check the SSL port number also.
Design Time configuration Steps needed for LDAP Adapter
To make the adapter a design time connection with Novell Server through SSL channel, we need to make some keystore, for the same .pem or, der certificate file is needed.
Step1:
In case of Novell server installed to enable encrypted connection, there will be automatically created .pem certificates under the folder <NOVELL_HOME>\NDS\DIBFiles\CertServ\KMOCache (say : UwBTAEwAIABDAEUAUgBUAEkARgBJAEMAQQBUAEUARABOAFMA.pem)
Step2:
Convert this file to .der file. Command for the same is,
openssl.bat x509 -inform PEM -outform DER -in <.pem file path with file name> -out cacert.der
Step3: To make the keystore
C:\tibco\jre\1.5.0\bin>keytool -import -v -alias CAcert -file C:\tibco\adapter\a
dldap\5.4\tools\openssl\cacert.der -keystore C:\tibco\jre\1.5.0\lib\security\cacerts.
Step4: The above command will prompt you to enter the keystore password (eg: changeit), enter the same and trust the certificate when it ask to do the same.
Run Time configuration Steps needed for LDAP Adapter
Step1: Prepare the certificate database, command for the same is
certutil.bat -N -d C:\tibco\adapter\adldap\5.4\certificates
Step 2: Add the certificate to the security database, command for the same is
certutil.bat -A -n CAcert -t "CTP,," -i C:\tibco\adapter\adldap\5.4\tools\openssl\cacert.der –d C:\tibco\adapter\adldap\5.4\certificates
Step 3: List the certificate and check if the certificate has been added successfully using the below command and verify the certificate.
certutil.bat -L -d C:\tibco\adapter\adldap\5.4\certificates
Issue/Introduction
How can I enable SSL on Novell e-directory Server and make the LDAP Adapter connect through the SSL channel?