SSL Integration with Windows ADS/LDAP

[Steven E. Protter]

Have a task at hand is to integrate a linux media wiki server into a ADS/LDAP environment.

The copius but incomplete wiki documentation requires an SSL certificate that is compatible with the Windows Server 2003 Server in order to properly integrate.

I used this script code to generate a certificate:

touch certindex.txt
touch index.txt
openssl req -new -x509 -keyout private/cakey.pem -out cacert.pem -days 3650 -config /etc/openssl.cnf
openssl req -new -nodes -out ${1}-req.pem -keyout private/${1}-key.pem -config /etc/openssl.cnf
openssl ca -out ${1}-cert.pem -config /etc/openssl.cnf -infiles ${1}-req.pem

certf="${1}-cert.pem"
keyf="private/${1}-key.pem"


cp $keyf /etc/httpd/conf/ssl.key/
cp $certf /etc/httpd/conf/ssl.crt/


I took the key and crt file and submitted it to Windows Systems Administration. I got back encrypted binary files that look somewhat like what I submitted. One appears to resemble the server.key file the other the crt file.

For security reasons I can't submit the files here.

What I don't have is an integration procedure with the windows. I honestly don't know if this is a windows thread or a Linux thread. I'm hoping that some Linux admin has done this and knows the next step.

I tried substituting the windows files for the files I generated and the ssl.conf configuration would not start.

So how do I integrate these nice windows certificate files so my media wiki server will happily integrate. There is nothing on this in the media wiki database.

I am need somethine fairly specific, so take your time and hold my hand. I will not be as generous as normal for vague suggestions. If you think this should be posted to Windows, please justify the position and I'll post something there. I'm betting the Linux admins are going to do a great job here.

SEP
Frustrated.

[Steven E. Protter]

The correct term here is import, not integration.

How do you import a windows ssl security certificate into Linux?

SEP

[Steven E. Protter]

I asked for this move because I realized it was a problem for ssl on hpux as well.

Hopefully the wide audience will help.

I'm looking at this thread, but don't totally get it.

A bunny for a link that includes explanation.

http://knowledgehub.zeus.com/faqs/2006/06/08/how_do_i_import_certificates_exported_fr

SEP

[Steven E. Protter]

We may have solved this by overwriting the server.crt file with the certificate generated by windows.

httpd restart works and the certificate shows up when we visit the https website.

We'll see.

I will re-open if user testing reveals a problem.

SEP