RE: TSL problems - what does no shared cipher mean?

["Howard Chu" <hyc@highlandsun.com>]

I guess you also need to configure the list of acceptable ciphers in
slapd.conf

We use

TLSCipherSuite DES-CBC3-SHA

I don't recall what the benefits are of particular encryption methods...

  -- Howard Chu
  Chief Architect, Symas Corp.       Director, Highland Sun
  http://www.symas.com               http://highlandsun.com/hyc

> -----Original Message-----
> From: owner-openldap-software@OpenLDAP.org
> [mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of Jim Hud
> Sent: Wednesday, October 11, 2000 8:03 AM
> To: openldap-software@OpenLDAP.org
> Subject: TSL problems - what does no shared cipher mean?
>
>
> With slapd set up to use openSSL and simply doing
>
> ldapsearch -Z
>
> the slapd logs show:
>
> TLS trace: SSL3 alert write:fatal:handshake failure
> TLS trace: SSL_accept:error in SSLv3 read client hello B
> TLS trace: SSL_accept:error in SSLv3 read client hello B
> TLS: can't accept.
> TLS: error:1408A0C1:SSL routines:SSL3_GET_CLIENT_HELLO:no shared cipher
> .\ssl\s3
> _srvr.c:772
>
> The same happens using an Outlook Express 5 with SSL enabled.
>
> What am I doing wrong?
>
>
>