Oracle Solaris 10: Configuring SSL Certificates for Migration

Bug ID 20848606: Configuring SSL Certificates for Migration in Oracle VM Server for SPARC 3.2 Administration Guide applies only to the Oracle Solaris 11.2 OS.

Use the following steps to configure the SSL certificates on an Oracle Solaris 10 OS:

How to Configure SSL Certificates for Migration (Oracle Solaris 10)

The following procedure describes how to configure SSL certificates, you must perform the steps in this task on both the source machine and the target machine.

1. Create the /var/opt/SUNWldm/trust directory if it does not already exist.
2. Securely copy the remote ldmd certificate in the /var/opt/SUNWldm/server.crt directory on the remote host to the local ldmd trusted certificate directory /var/opt/SUNWldmd/trust with the name remote-hostname.pem.
3. Change to the /var/opt/SUNWldm/trust directory.

   localhost# cd /var/opt/SUNWldm/trust

4. Set the HASH variable and set the REMOTE variable to remote-hostname.

   localhost# REMOTE=remote-hostname
   localhost# HASH=`/usr/sfw/bin/openssl x509 -hash -noout -in ${REMOTE}.pem`

5. Create a symbolic link from the certificate in the ldmd trusted certificate directory to /etc/sfw/openssl/certs/${HASH}.index.

   localhost# ln -s /var/opt/SUNWldm/trust/${REMOTE}.pem /etc/sfw/openssl/certs/${HASH}.index

6. Verify that the configuration is operational.

   localhost# /usr/sfw/bin/openssl verify  /var/opt/SUNWldm/trust/${REMOTE}.pem
   /var/opt/SUNWldm/trust/remote-hostname.pem: OK

7. Restart the ldmd daemon.

   localhost# svcadm restart ldmd