SSL Certificates installed in directory proxy server 6.3.1 appear In CA Certs instead Of Certs container (Doc ID 1496042.1)

Last updated on OCTOBER 11, 2016

Applies to:

Oracle Directory Server Enterprise Edition - Version 6.3 to 11.1.1.5.0 [Release 6.0 to 11gR1]
Information in this document applies to any platform.

Symptoms

SSL server certificates added to the DPS certificate database appear as CA certs, rather than server certs. The following example shows how the server certificate is added but is listed as CA cert rather than a server cert.

# dpadm list-certs /var/dps
0 certificate found.
________________________________________________

# dpadm list-certs -C /var/dps | grep testcert
testcert.2012                  2012/06/22 09:51 2017/06/21 09:51 n         CN=xxx Issuing CA, OU=xxx, O=xxx, L=xxx, ST=xxx, DC=xxx, DC=example, DC=com, DC=xxx, C=xxx                     CN=test.xxx.example.com, O=xxx, OU=xxx, L=xxx, ST=xxx, C=xxx
________________________________________________

# dpadm add-cert /var/dps testcert01.xxx.example.com /tmp/ldap_certs_2012/testcert01.xxx.example.com_3699.cert
________________________________________________

# dpadm list-certs /var/dps
0 certificate found.
________________________________________________

 

===> Notice that when issued with the -C option to display CA certs, 'dpadm list-certs' displays the newly added server certificate: testcert01.xxx.example.com.


# dpadm list-certs -C /var/dps | grep testcert
testcert01.xxx.example.com    2012/06/22 09:51 2017/06/21 09:51 n         CN=xxx Issuing CA, OU=xxx, O=xxx, L=xxx, ST=xxx, DC=xxx, DC=example, DC=com, DC=xxx, C=xxx                   CN=test.xxx.example.com, O=xxx, OU=xxx, L=xxx, ST=xxx, C=xxx
testcert01.2012                  2012/06/22 09:51 2017/06/21 09:51 n         CN=xxx Issuing CA, OU=xxx, O=xxx, L=xxx, ST=xxx, DC=xxx, DC=example, DC=com, DC=xxx, C=xxx                  CN=test.xxx.example.com, O=xxx, OU=xxx, L=xxx, ST=xxx, C=xxx

Changes

 self-signed certificate was removed.

Cause

Sign In with your My Oracle Support account

Don't have a My Oracle Support account? Click to get started

My Oracle Support provides customers with access to over a
Million Knowledge Articles and hundreds of Community platforms