Remove the encryption key lines from the dirsrv config on TLS cert renewal #152

New Issue

greg · 2020-04-19T10:36:43Z

greg commented

2020-04-19 10:36:43 +00:00

https://access.redhat.com/documentation/en-us/red_hat_directory_server/9.0/html/administration_guide/ssl-and-attr-encryption

On top of this, it took a few restarts for the service to actually keep running, so we need to investigate this. No error message, just:

Apr 19 10:23:04 barnard ns-slapd[3483]: [19/Apr/2020:10:23:04.650310236 +0000] - INFO - slapd_daemon - Listening on All Interfaces port 636 for LDAPS requests
Apr 19 10:23:04 barnard systemd[1]: Started 389 Directory Server master..
Apr 19 10:23:05 barnard systemd[1]: dirsrv@master.service: Main process exited, code=killed, status=11/SEGV
Apr 19 10:23:05 barnard systemd[1]: dirsrv@master.service: Failed with result 'signal'.

https://access.redhat.com/documentation/en-us/red_hat_directory_server/9.0/html/administration_guide/ssl-and-attr-encryption On top of this, it took a few restarts for the service to actually keep running, so we need to investigate this. No error message, just: ``` Apr 19 10:23:04 barnard ns-slapd[3483]: [19/Apr/2020:10:23:04.650310236 +0000] - INFO - slapd_daemon - Listening on All Interfaces port 636 for LDAPS requests Apr 19 10:23:04 barnard systemd[1]: Started 389 Directory Server master.. Apr 19 10:23:05 barnard systemd[1]: dirsrv@master.service: Main process exited, code=killed, status=11/SEGV Apr 19 10:23:05 barnard systemd[1]: dirsrv@master.service: Failed with result 'signal'. ```

greg self-assigned this 2020-04-19 10:36:43 +00:00

greg referenced this issue

2020-04-20 17:01:40 +00:00

Fix the invalid ACIs on initial creation #156

greg referenced this issue from a commit

2020-04-20 17:14:56 +00:00

Remove the encryption keys after TLS cert renewal This is done with awk, this was the best way I found to perform the multi-line deletion. It deletes both the AES AND 3DES sections The keys will be recreated on service restart https://access.redhat.com/documentation/en-us/red_hat_directory_server/9.0/html/administration_guide/ssl-and-attr-encryption Closes #152

greg referenced a pull request that will close this issue

2020-04-20 17:15:56 +00:00

Remove the encryption keys after TLS cert renewal #157

greg closed this issue

2020-04-30 15:50:30 +00:00