Gentoo Websites Logo
Go to: Gentoo Home Documentation Forums Lists Bugs Planet Store Wiki Get Gentoo!
Bug 99041 - emerging OpenLDAP; generating self signed cert fails
Summary: emerging OpenLDAP; generating self signed cert fails
Status: RESOLVED WONTFIX
Alias: None
Product: Gentoo Linux
Classification: Unclassified
Component: New packages (show other bugs)
Hardware: All Linux
: High normal (vote)
Assignee: Robin Johnson
URL:
Whiteboard:
Keywords:
Depends on:
Blocks:
 
Reported: 2005-07-14 13:25 UTC by Blu3
Modified: 2005-08-23 23:15 UTC (History)
0 users

See Also:
Package list:
Runtime testing required: ---


Attachments

Note You need to log in before you can comment on or make changes to this bug.
Description Blu3 2005-07-14 13:25:32 UTC
(near the end of the emerge)

______________________________________________________________________

Creating self-signed certificate -- Version 0.3

______________________________________________________________________


error on line -1 of /etc/openldap/ssl/ldap.cfg
16265:error:02001002:system library:fopen:No such file or directory:bss_file.c:104:fopen('/etc/openldap/ssl/ldap.cfg','rb')
16265:error:2006D080:BIO routines:BIO_new_file:no such file:bss_file.c:107:
16265:error:0E064072:configuration file routines:CONF_load:no such file:conf_def.c:197:
cca:Error: Failed to generate certificate
chmod: cannot access `ldap.pem': No such file or directory
chown: cannot access `ldap.pem': No such file or directory
 * Self-signed SSL certificates are treated harshly by OpenLDAP 2.[12]
 * add 'TLS_REQCERT never' if you want to use them.
 * If you are upgrading from OpenLDAP-2.1, and run slapd on this
 * machine please see the ebuild for upgrade instructions, otherwise
 * you may corrupt your database!

 * Part of the configuration file syntax has changed:
 * 'access to attribute=' is now 'access to attrs='

 * You must also run revdep-rebuild after upgrading from 2.1 to 2.2:
 * # revdep-rebuild --soname liblber.so.2
 * # revdep-rebuild --soname libldap.so.2

etc.
Comment 1 Robin Johnson archtester Gentoo Infrastructure gentoo-dev Security 2005-08-23 23:15:50 UTC
this is not critical (as it shouldn't fail at that point anyway).
I'm considering taking out the automatic cert generation totally, and making it 
a manual process.