pkiexp



By: jimc

May 14, 2009 5:50 pm

Reads: 169

License:
University of Illinois/NCSA Open Source

download url: http://www.champwilde.f9.co.uk/idmphp/kmiexp/kmiexp.zip
home page url: http://www.champwilde.f9.co.uk/idmphp/kmiexp/

A pair of php scripts which list Expiry dates for SSL certiicates in eDirectory. The tool reads the certificates from LDAP and creates a web page with a list of certificates and expiry dates. The list highlights Certicates that have or are about to expire. Normally you should renew them, say using pkidiag or iManager.

To install this you need to have a web server which supports php and LDAP. The tool is tested and installed on Netware 6.5 with Apache, but should be capable of running on other combinations of web server and operating system provided that php is installed and configured with LDAP support. I recommend you create a new folder for the application files in the web server root folder. On an “out of the box” NW65 install this will be sys:Apache2\htdocs, so create sys:Apache\htdocs\kmiexp. Extract the two files from the zip archive, kmiexp.php and pkiexprun.php into this folder. No other configuration is necessary.

To run the installed scripts start a web browser on an appropriate device and point it at the kmiexp.php script. In the example above the usr would be http://[servername]/kmiexp/kmiexp.php. From there on it should be self explanatory. The script should run on any reasonably recent web browser and client operating system.

VN:F [1.9.22_1171]
Rating: 0.0/5 (0 votes cast)

Tags: ,
Categories: Cool Tools, eDirectory

Disclaimer: As with everything else at NetIQ Cool Solutions, this content is definitely not supported by NetIQ, so Customer Support will not be able to help you if it has any adverse effect on your environment.  It just worked for at least one person, and perhaps it will be useful for you too.  Be sure to test in a non-production environment.

Comment