Generate CSR with certutil
The docs are only specific to creating a self-signed cert using "certutil -S". Due to the console not working correctly with ssl certs when I set it up (receiving com.netscape.page.DeserializationException errors), I just followed the docs for the self-signed cert.
Now, if I open Messaging console and "Manage Certificates", it asks to create a database password. I already have a db in /opt/sun/messaging/config/(key3|cert8).db. Neither local.ssldbprefix or local.ssldbpath is set. THanks for any tips.
# 2
There is a little more documentation there, but not much. And some of the options are slightly different. But, reading a lot and trying for a bit, it seems like it would just be easier to do what JES wants and generate a csr from the gui. Problem is what I asked before. Messaging is using certs from /opt/sun/messaging/config and, I assume, the gui, is looking at /var/opt/sun/directory-server/alias/msg-config-cert8.db (which is empty at this point). So, if I generate a cert in the gui, how do I extract cert+private key to the current messaging/config/cert8.db? Or, for that matter, how do I get messaging to look at directory-server/alias for certs? local.ssldbpath and local.ssldbprefix are not set.
# 3
First, your current cert8.db is likely to be just a copy of /var/opt/sun/directory-server/alias/cert8.db.
You can add to the one in the DS directory, and just copy it. Or, you can link it.I have seen reports of linking not working, and of soft links working. A soft link should work fine.
