RE: LDAP and TLS

["Howard Chu" <hyc@highlandsun.com>]

> -----Original Message-----
> From: owner-openldap-software@OpenLDAP.org
> [mailto:owner-openldap-software@OpenLDAP.org]On Behalf Of Kurt D.
> Zeilenga

> At 12:07 PM 2001-08-31, Geert Van Muylem wrote:
> >TLS trace: SSL_accept:error in SSLv3 read client certificate A
> >TLS trace: SSL_accept:error in SSLv3 read client certificate A
>
> Somebody with more OpenSSL internals experience will have
> to explain these.  Obviously they are benign messages in
> this case.

Yes, this is a case of the server trying to read the certificate before it
has fully arrived. The SSL code just retries automatically until it has read
the complete cert. This happens quite a lot; the certs tend to be relatively
large and take multiple packets to transmit. There is no problem here.