./easyrsa init-pki Note: using Easy-RSA configuration from: /home/user/CA/vars init-pki complete; you may now create a CA or requests. Your newly created PKI dir is: /home/user/CA/pki $ ./easyrsa build-ca now import and sign cert requests. Your new CA certificate file for publishing is at: /home/user/CA/pki/ca.crt Your CA is now configured and you should be able to generate certs easily now. Application Generating a RSA private key ............................+++++ writing new private key to '/home/user/CA/pki/easy-rsa -178308.W6uc3G/tmp.Iqlvgf' ----- You are about to be asked to enter information that will

uses the directory /etc/pki/tls/certs. 2. Change to the directory where you copied the CA certificate file and, as the root user, generate the hash for OpenLDAP: # cd /etc/pki/tls/certs # openssl example.priv ldaps://ldapC.example.priv BASE dc=example,dc=priv TLS_CACERTDIR /etc/pki/tls/certs TLS_CACERT /etc/pki/tls/certs/ 4. As the gpadmin user, edit /usr/local/greenplum-db/greenplum_path

uses the directory /etc/pki/tls/certs. 2. Change to the directory where you copied the CA certificate file and, as the root user, generate the hash for OpenLDAP: # cd /etc/pki/tls/certs # openssl example.priv ldaps://ldapC.example.priv BASE dc=example,dc=priv TLS_CACERTDIR /etc/pki/tls/certs TLS_CACERT /etc/pki/tls/certs/ 4. As the gpadmin user, edit /usr/local/greenplum-db/greenplum_path

uses the directory /etc/pki/tls/certs. 2. Change to the directory where you copied the CA certificate file and, as the root user, generate the hash for OpenLDAP: # cd /etc/pki/tls/certs # openssl example.priv ldaps://ldapC.example.priv BASE dc=example,dc=priv TLS_CACERTDIR /etc/pki/tls/certs TLS_CACERT /etc/pki/tls/certs/ 4. As the gpadmin user, edit /usr/local/greenplum-db/greenplum_path

uses the directory /etc/pki/tls/certs. 2. Change to the directory where you copied the CA certificate file and, as the root user, generate the hash for OpenLDAP: # cd /etc/pki/tls/certs # openssl x509 example.priv ldaps://ldapC.example.priv BASE dc=example,dc=priv TLS_CACERTDIR /etc/pki/tls/certs TLS_CACERT /etc/pki/tls/certs/ Note: For certificate validation to succeed, the hostname

uses the directory /etc/pki/tls/certs. 2. Change to the directory where you copied the CA certificate file and, as the root user, generate the hash for OpenLDAP: # cd /etc/pki/tls/certs # openssl dc=priv VMware Greenplum 6 Documentation VMware by Broadcom 1050 TLS_CACERTDIR /etc/pki/tls/certs TLS_CACERT /etc/pki/tls/certs/ 4. As the gpadmin user, edit /usr/local/greenplum-db/greenplum_path

uses the directory /etc/pki/tls/certs. 2. Change to the directory where you copied the CA certificate file and, as the root user, generate the hash for OpenLDAP: # cd /etc/pki/tls/certs # openssl example.priv ldaps://ldapC.exampl e.priv BASE dc=example,dc=priv TLS_CACERTDIR /etc/pki/tls/certs TLS_CACERT /etc/pki/tls/certs/ VMware Greenplum 7 Documentation VMware by Broadcom

uses the directory /etc/pki/tls/certs. 2. Change to the directory where you copied the CA certificate file and, as the root user, generate the hash for OpenLDAP: # cd /etc/pki/tls/certs # openssl x509 example.priv ldaps://ldapC.exampl e.priv BASE dc=example,dc=priv TLS_CACERTDIR /etc/pki/tls/certs TLS_CACERT /etc/pki/tls/certs/ Note: For certificate validation to succeed, the hostname

uses the directory /etc/pki/tls/certs. 2. Change to the directory where you copied the CA certificate file and, as the root user, generate the hash for OpenLDAP: # cd /etc/pki/tls/certs # openssl x509 example.priv ldaps://ldapC.exampl e.priv BASE dc=example,dc=priv TLS_CACERTDIR /etc/pki/tls/certs TLS_CACERT /etc/pki/tls/certs/ Note For certificate validation to succeed, the hostname

uses the directory /etc/pki/tls/certs. 2. Change to the directory where you copied the CA certificate file and, as the root user, generate the hash for OpenLDAP: # cd /etc/pki/tls/certs # openssl x509 example.priv ldaps://ldapC.exampl e.priv BASE dc=example,dc=priv TLS_CACERTDIR /etc/pki/tls/certs TLS_CACERT /etc/pki/tls/certs/ Note: For certificate validation to succeed, the hostname