[389-users] precreation nss databases

hi,

I'm still evaluating some options to securize dynamic nodes and I have some questions regarding certutil and nss databases:


Can I create NSS databases on any directory/server and then move files to "/etc/dirsrv/slapd-instance_name" ?

If cert8.db and key3.db files are found in that directory are they used automatically by slapd process on reboot?


If both answers are affirmative I'll try to script it and hook it within my node creation flow.
is there any other detail I should take care of with this approach?


thanks,

abosch




--
_______________________________________________
389-users mailing list -- 389-users@lists.fedoraproject.org
To unsubscribe send an email to 389-users-leave@lists.fedoraproject.org
Fedora Code of Conduct: https://docs.fedoraproject.org/en-US/project/code-of-conduct/
List Guidelines: https://fedoraproject.org/wiki/Mailing_list_guidelines
List Archives: https://lists.fedoraproject.org/archives/list/389-users@lists.fedoraproject.org