Ceci est une ancienne révision du document !
OpenLDAP et Let's Encrypt
Préparation
adduser openldap ssl-cert chgrp ssl-cert /etc/letsencrypt/archive/ /etc/letsencrypt/live/ chmod g+rx /etc/letsencrypt/archive/ /etc/letsencrypt/live/
Configuration
- Créer le fichier LDIF /tmp/ssl.ldif :
dn: cn=config changetype: modify add: olcTLSCACertificateFile olcTLSCACertificateFile: /etc/letsencrypt/live/pepito.zionetrix.net/chain.pem - add: olcTLSCertificateFile olcTLSCertificateFile: /etc/letsencrypt/live/pepito.zionetrix.net/cert.pem - add: olcTLSCertificateKeyFile olcTLSCertificateKeyFile: /etc/letsencrypt/live/pepito.zionetrix.net/privkey.pem -
- Appliquer la modification :
ldapmodify -h 127.0.0.1 -D cn=admin,cn=config -W -f /tmp/ssl.ldif