Alberto CostaI am Alberto, a researcher in Optimization. And the usual question is: "optimization of what?"

Bsc Costa

PDF · 9 Apr 2024

Share

Continues the installation/configuration chapter focused on integrating the CA with supporting services. Describes creating PKCS#12 files with OpenSSL, certificate format conversions (PEM ↔ DER) for smartcard/token import, and shows the resulting test folder contents. Then documents installing Berkeley DB (db-4.6.18), Cyrus SASL (cyrus-sasl-2.1.22), and OpenLDAP (openldap-2.3.38): download, extract, configure (with flags for /usr/local), make, make install, and post-install configuration steps. Provides Ejbca integration steps: configure an LDAP V3 Publisher in EJBCA admin, copy ejbca.schema and a custom certificate.schema into /usr/local/etc/openldap/schema, and several sample entries from certificate.schema (attributeType and objectclass OIDs). Includes detailed slapd.conf modifications (includes for multiple schemas, BDB backend, suffix/rootdn/rootpw, directory, ACLs). Shows creating SASL user via saslpasswd2 and starting slapd, plus installing LDAP Browser/Editor (v2.8.2) and configuring it to connect to the LDAP server. Documents a known Firefox "Certificate Rejected" error accessing Ejbca admin, and gives remedial steps: remove certain personal/authority certs from Firefox, export CA root cert via ejbca.sh, replace local cacerts, import root CA into Firefox Authorities store and import SuperAdmin PKCS#12 as personal cert. Concludes with thesis conclusions and bibliography/references.