I have two servers working in a multi-master mirror mode OpenLDAP setup.
server-0.example.com, server-1.example.com and server-vip.example.com
server-vip.example.com is a floating virtual IP that associates itself on the interface of the active node (server-0 or server-1), a rather common setup.
the problem is, I created some self signed certificates with a CA on server-0. what is the distribution of ssl client/server certificates that needs to happen for the two servers to speak to each other, and more importantly, for clients to speak to server-vip.example.com?
simply copy/pasting configs doesn't seem to be the answer, especially since the common name on the servers is unique, they each have different host names.
also, if server-0 goes down, and server-vip points at server-1, how are clients supposed to transparently work in as far as SSL goes if they have a client certificate for server-0?