SSL problem

[Øystein Andreassen <zyxmaw@online.no>]

Hello everyone!

I have a problem regardig SSL.
When I do something like this:

ldapsearch -ZZ -x -h ldap.ksdrift.no -p 636 -P 3 -d 1 -b 'dc=ksdrift,dc=no'
'(objectclass=*)'

I get an error:

ldap_create
ldap_extended_operation_s
ldap_extended_operation
ldap_send_initial_request
ldap_new_connection
ldap_int_open_connection
ldap_connect_to_host: ldap.ksdrift.no
ldap_new_socket: 3
ldap_prepare_socket: 3
ldap_connect_to_host: Trying 192.168.0.87:636
ldap_connect_timeout: fd: 3 tm: -1 async: 0
ldap_ndelay_on: 3
ldap_ndelay_off: 3
ldap_open_defconn: successful
ldap_send_server_request
ber_flush: 31 bytes to sd 3
ldap_result msgid 1
ldap_chkResponseList for msgid=1, all=1
ldap_chkResponseList returns NULL
wait4msg (infinite timeout), msgid 1
wait4msg continue, msgid 1, all 1
** Connections:
* host: ldap.ksdrift.no  port: 636  (default)
  refcnt: 2  status: Connected
  last used: Sun Jun 23 00:17:59 2002

** Outstanding Requests:
 * msgid 1,  origid 1, status InProgress
   outstanding referrals 0, parent count 0
** Response Queue:
   Empty
ldap_chkResponseList for msgid=1, all=1
ldap_chkResponseList returns NULL
do_ldap_select
read1msg: msgid 1, all 1
ber_get_next
ldap_perror
ldap_start_tls: Can't contact LDAP server


The server says:

slapd startup: initiated.
slapd starting
daemon: added 8r
daemon: select: listen=8 active_threads=0 tvp=NULL
daemon: activity on 1 descriptors
daemon: new connection on 9
daemon: conn=0 fd=9 connection from IP=192.168.0.87:1225 (IP=0.0.0.0:31746)
accepted.
daemon: added 9r
daemon: activity on:
daemon: select: listen=8 active_threads=0 tvp=NULL
daemon: activity on 1 descriptors
daemon: activity on: 9r
daemon: read activity on 9
connection_get(9)
connection_get(9): got connid=0
connection_read(9): checking for input on id=0
TLS trace: SSL_accept:before/accept initialization
tls_read: want=11, got=11
  0000:  30 1d 02 01 01 77 18 80  16 31 2e                  0....w...1.
TLS trace: SSL_accept:error in SSLv2/v3 read client hello A
TLS: can't accept.
TLS: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol
/usr/src/secure/lib/libssl/../../../crypto/openssl/crypto/../ssl/s23_srvr.c:
567
connection_read(9): TLS accept error error=-1 id=0, closing
connection_closing: readying conn=0 sd=9 for close
connection_close: conn=0 sd=9
daemon: removing 9
conn=-1 fd=9 closed
daemon: select: listen=8 active_threads=0 tvp=NULL
daemon: activity on 1 descriptors
daemon: select: listen=8 active_threads=0 tvp=NULL


So my question is simple: What am I doing wrong? :)

Thank you for listening!

Øystein