summaryrefslogtreecommitdiffstats
path: root/scripts/ds-ssl-enable.sh
blob: 0124fe7e81d42f9076fc4c66c6d48edbd9d442ef (plain)
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
#!/bin/sh -x

# enable SSL
ldapmodify -x -D "cn=Directory Manager" -w Secret123 <<EOF
dn: cn=config
changetype: modify
replace: nsslapd-security
nsslapd-security: on

dn: cn=RSA,cn=encryption,cn=config
changetype: add
objectclass: top
objectclass: nsEncryptionModule
cn: RSA
nsSSLPersonalitySSL: $HOSTNAME
nsSSLToken: internal (software)
nsSSLActivation: on
EOF

#dn: cn=encryption,cn=config
#changetype: modify
#add: nsSSL3Ciphers
#nsSSL3Ciphers: +all

systemctl restart dirsrv@pki-tomcat.service