Ceci est une ancienne révision du document !

OpenLDAP et Let's Encrypt

Préparation

adduser openldap ssl-cert
chgrp ssl-cert /etc/letsencrypt/archive/ /etc/letsencrypt/live/
chmod g+rx /etc/letsencrypt/archive/ /etc/letsencrypt/live/

Configuration

Créer le fichier LDIF /tmp/ssl.ldif :

dn: cn=config
changetype: modify
add: olcTLSCACertificateFile
olcTLSCACertificateFile: /etc/letsencrypt/live/pepito.zionetrix.net/chain.pem
-
add: olcTLSCertificateFile
olcTLSCertificateFile: /etc/letsencrypt/live/pepito.zionetrix.net/cert.pem
-
add: olcTLSCertificateKeyFile
olcTLSCertificateKeyFile: /etc/letsencrypt/live/pepito.zionetrix.net/privkey.pem
-

Appliquer la modification :

ldapmodify -h 127.0.0.1 -D cn=admin,cn=config -W -f /tmp/ssl.ldif