 We can now issue the certificate:
 
 ```bash
-openssl ca -batch -config /tmp/openldap/myca.conf -notext -in openldap.hadoop.csr -out openldap.hadoop.cer
+openssl ca -batch -config ./myca.conf -notext -in openldap.hadoop.csr -out openldap.hadoop.cer
 ```
 
 Here's the output:

for their great articles. This installation procedure wasn't as smooth as I 
would expect so here's a recap.

This is using the [OpenSSL](https://www.openssl.org/) library. Although not tested, 
[Brad Chen](http://www.bradchen.com/blog/2012/08/openldap-tls-issue) wrote 
a comprehensive tutorial on using the [Mozilla NSS](https://developer.mozilla.org/en/docs/NSS) tools.

We start by positioning ourself inside a new directory.


umask 066
```

Generate a privkey.pem file (base64 encoded RSA private key) as well as a 
openldap.hadoop.ca.cer file containing the self-signed Certificate Authority 
(CA) public key with a 3650 day validity 
period. Both will be referenced in our CA configuration. You may leave the 
challenge password blank.    

```bash
openssl req -newkey rsa:2048 -days 3650 -x509 -nodes -out openldap.hadoop.ca.cer
