Metacat

1. In /etc/ldap/slapd.conf file, remove the comment symbols of two lines:

   TLSCertificateFile /var/lib/ldap/cert/cacert.pem

   TLSCertificateKeyFile /var/lib/ldap/cert/privkey.pem

2. In /var/lib/ldap/cert directory (which should be as same as the one in slapd.conf file), generate private key:

   openssl genrsa -out privkey.pem 1024

3. In /var/lig/ldap/cert directory, generate self-signed certificate:

   openssl req -new -x509 -days 900  -key privkey.pem -out cacert.pem

   The example to set up a certificate:

   Country Name (2 letter code) [GB]:US

   State or Province Name (full name) [Berkshire]:California

   Locality Name (eg, city) [Newbury]:Santa Barbara

   Organization Name (eg, company) [My Company Ltd]:UCSB

   Organizational Unit Name (eg, section) []:NCEAS

   Common Name (eg, your name or your server's hostname) []:dev.nceas.ucsb.edu

   (Note: don't put port number here)

   Email Address []:tao@nceas.ucsb.edu

   Note: the country name, state name (full name) and host name should be correct ones.

4. Copy the certificate file - cacert.pem to $JAVA_HOME/jre/lib/security directory.

   Note: the $JAVA_HOME is the java home under which Metacat is running. It can be in different 

   machine to Ldap, if Metacat and Ldap are running in different machines. 

5. In $JAVA_HOME/jre/lib/security directory, import the certificate into key store:

   keytool -import -alias knp-ldap -file cacert.pem -keystore cacerts

6. Restart tomcat.

7. Restart Ldap.