Open Directory refusing to use the server's certificate

Question

Level 2

221 points

Open Directory refusing to use the server's certificate

We have an SSL certificate signed by a 3rd party (Digicert) and our Maverick's server refuses to accept it for use with Open Directory (though other services appear to be using it).

Here is a related thread discussing the problem.

We need SSL to work with Open Directory in our environment so I'd like to try whiping out the Open Directory data and set up our Maverick's Server as an OD master from scratch now that the certificate has been added to the server (it wasn't there when OD was originally turned on). What I don't want to do is re-install the entire OS.

Any tips on how to do this?

Posted on Mar 11, 2014 5:20 PM

Reply

Answer 1

Mar 14, 2014 1:58 PM in response to Demetrios

I am having this exact same problem, and just noticed it. The certs we use here (Office of Information Technology at University of Massachusetts Amherst) are most often issued by InCommon.org so there shouldn't be a problem with this.

I am now wondering if this is causing a related problem with Profile Manager.

This is happening on Server v3.0.3.

Reply

Answer 2

Demetrios Author

Level 2

221 points

Mar 17, 2014 5:17 PM in response to brucefromamherst

I just upgraded to Server 3.1; problem persists.

Called my certificate authority to see if they had any ideas. They said, "yeah, we're seeing a lot of problems with Mavericks Server."

C'mon Apple! Get your sh*t together! This is a BIG deal!

Reply