Search code examples
sslldapcertificateopends

LDAP store SSL certificate

I'm using OpenDS as a LDAP server. Is it possible to store SSL certificates for several applications (Tomcat/Apache Webserver etc.) in LDAP?

I think "userCertificate" wouldn't be the right choice. Could this be handled by an extension?

Thanks in advance. Regards, Daniel

Solution

  • It depends on the purpose.

    • userCertificate is for certificates
    • userPKCS12 is for PKCS12 keystores including key-pairs, certificates, and signer chains.

    One object class that includes them both is inetOrgPerson.