I noticed that the server was extracting the PEM files from the keystore by
default and was wondering if there was really any use for this being on by
default.
The relevant setting is nsslapd-extract-pemfiles.
Thanks,
Trevor
--
Trevor Vaughan
Vice President, Onyx Point, Inc
(410) 541-6699 x788
-- This account not approved for unencrypted proprietary information --