Re: opendap sdk and ssl

[Karsten Künne <kuenne@rentec.com>]

John Luce wrote:
> 
> Where is there documentation on "How-To" use the SSL features in the LDAP
> library to be used by clients ?
> 
> In other words, I have an app that uses the ldap library to connect and
> transfer data with the LDAP server. How does one get this app to open an
> LDAP connection that uses SSL, reads and writes from the SSL connection and
> closes the SSL connection.
> 
> Any docs anywhere ?
> 

Use:

    ldap_start_tls_s(LDAP *ldap, NULL, NULL);

Worked fine for me. But you have to make sure that you're using LDAPV3,
for
instance by setting the option:

     int version = LDAP_VERSION3;
     ldap_set_option(ldap, LDAP_OPT_PROTOCOL_VERSION, &version);

after the ldap_init call.

> Is the 2.0.7 library broken in this respect ?
> 
> ----- Original Message -----
> From: "Kurt D. Zeilenga" <Kurt@openldap.org>
> To: <tarjei@nu.no>
> Cc: <openldap-software@openldap.org>
> Sent: Thursday, May 24, 2001 9:18 AM
> Subject: Re: opendap sdk and ssl
> 
> > The 2.0 libraries support both LDAP over SSL and LDAPv3 Start TLS.
> >
> > Kurt
> >
> > At 05:20 AM 5/24/01, Tarjei Huse wrote:
> > >Hi,
> > >
> > >Many different ldap packages (among them auth_ldap and pam/nss-ldap )
> states
> > >that the netscape sdk is needed to compile them with ssl support. Is this
> > >true for openldap 2.0.x or is it just for the 1.2.x series?
> > >
> > >If no ssl support in the sdk exists, are there plans to include it?
> > >
> > >Also, what is the recomended version of the netscape sdk?
> > >
> > >Vennlig hilsen
> > >Tarjei Huse
> >
> >

--
Karsten.

+-Bruce Schneier about RAND-tables:----------------------------+
|It lists them in 5 digit groups - 50 on a line and 50 lines on|
|a page ("100097 32533 76520 13568...").  The table goes on for|
|400 pages and exept for  a particular racy section on page 283|
|which reads "69696" makes for a boring read.                  |
+--------------------------------------------------------------+

begin:vcard 
n:Künne;Karsten
tel;cell:+1 516 857 0406
tel;fax:+1 631 444 7073
tel;work:+1 631 444 7048
x-mozilla-html:TRUE
url:http://www.desy.de/~kuenne
org:Renaissance Technologies Corp.
adr;quoted-printable:;;Notkestr. 85=0D=0A22607 Hamburg;Hamburg;;22607;Germany
adr:;;;;;;
version:2.1
email;internet:kuenne@rentec.com
title:Dr.-Ing.
x-mozilla-cpt:;19264
fn:Karsten Künne
end:vcard