Re: slapd dies, when trying ssl-connect

["Kurt D. Zeilenga" <Kurt@OpenLDAP.org>]

You didn't say which version of OpenLDAP Software you are
using.  If you are not using the latest "stable" or "release",
you might consider upgrading.

Kurt

At 02:05 AM 2002-08-22, Harry Rüter wrote:
>Hi everybody,
>
>my slapd dies when i try to do the following :
>
>---snipp---
>
>486dx66:~ # fuser -n tcp 5636
>5636/tcp:            31892 31908 31909
>486dx66:~ # ldapsearch -x -h 486dx66.hrnet.de -p 5636
>ldap_bind: Can't contact LDAP server
>486dx66:~ # fuser -n tcp 5636
>486dx66:~ #
>
>---snipp---
>
>Log (level 256) says :
>
>---snipp---
>Aug 22 10:55:52 486dx66 slapd212-replica[31909]: daemon: conn=0 fd=13
>connection from IP=192.168.1.3:9216 (IP=192.168.1.3:5636) accepted.
>---snipp---
>
>Log (produced with -d 65535 > /var/log/slapd.log when 
>starting slapd) says :
>
>---snipp---
>slapd starting
>daemon: added 6r
>daemon: added 7r
>daemon: select: listen=6 active_threads=0 tvp=NULL
>daemon: select: listen=7 active_threads=0 tvp=NULL
>daemon: activity on 1 descriptors
>daemon: new connection on 13
>daemon: conn=0 fd=13 connection from IP=192.168.1.3:9216
>(IP=192.168.1.3:5636) accepted.
>daemon: added 13r
>daemon: activity on:
>daemon: select: listen=6 active_threads=0 tvp=NULL
>daemon: select: listen=7 active_threads=0 tvp=NULL
>daemon: activity on 1 descriptors
>daemon: activity on: 13r
>daemon: read activity on 13
>connection_get(13)
>connection_get(13): got connid=0
>connection_read(13): checking for input on id=0
>TLS trace: SSL_accept:before/accept initialization
>tls_read: want=11, got=11
>  0000:  80 80 01 03 01 00 57 00  00 00 20                  ......W...
>tls_read: want=119, got=119
>  0000:  00 00 16 00 00 13 00 00  0a 07 00 c0 00 00 66 00  
>..............f.
>  0010:  00 07 00 00 05 00 00 04  05 00 80 03 00 80 01 00  
>................
>  0020:  80 08 00 80 00 00 65 00  00 64 00 00 63 00 00 62  
>......e..d..c..b
>  0030:  00 00 61 00 00 60 00 00  15 00 00 12 00 00 09 06  
>..a..`..........
>  0040:  00 40 00 00 14 00 00 11  00 00 08 00 00 06 00 00  
>.@..............
>  0050:  03 04 00 80 02 00 80 2a  b6 da 4b 28 3c 01 e1 fc  
>.......*..K(<...
>  0060:  64 5a ba 9a d7 ac 83 2c  fd 7b 72 50 7a ec b0 a2  
>dZ.....,.{rPz...
>  0070:  cb bf de 63 d1 61 d4                               ...c.a.
>TLS trace: SSL_accept:SSLv3 read client hello A
>TLS trace: SSL_accept:SSLv3 write server hello A
>TLS trace: SSL_accept:SSLv3 write certificate A
>TLS trace: SSL_accept:SSLv3 write server done A
>tls_write: want=2099, written=2099
>  0000:  16 03 01 00 4a 02 00 00  46 03 01 3d 64 a7 18 a8  
>....J...F..=d...
>  0010:  5c d6 50 c1 db 89 c0 cd  86 27 cf ec 86 9c 19 14  
>\.P......'......
>  0020:  bc dc 6e da 90 81 8a 23  ca e1 77 20 53 3e 28 7a   ..n....#..w
>S>(z
>  0030:  0a 12 4f cc 8c 3b a2 c1  13 82 6a f1 1b 47 5d ae  
>..O..;....j..G].
>  0040:  0d 98 a6 b2 b4 23 36 4a  d1 ac 73 6e 00 0a 00 16  
>.....#6J..sn....
>  0050:  03 01 07 d6 0b 00 07 d2  00 07 cf 00 03 e3 30 82  
>..............0.
>  0060:  03 df 30 82 02 c7 02 01  09 30 0d 06 09 2a 86 48  
>..0......0...*.H
>  0070:  86 f7 0d 01 01 04 05 00  30 81 b6 31 0b 30 09 06  
>........0..1.0..
>  0080:  03 55 04 06 13 02 44 45  31 10 30 0e 06 03 55 04  
>.U....DE1.0...U.
>  0090:  08 13 07 47 65 72 6d 61  6e 79 31 22 30 20 06 03  
>...Germany1"0 ..
>  00a0:  55 04 07 13 19 4e 69 65  64 65 72 6e 68 61 75 73  
>U....Niedernhaus
>  00b0:  65 6e 2d 4f 62 65 72 6a  6f 73 62 61 63 68 31 21  
>en-Oberjosbach1!
>  00c0:  30 1f 06 03 55 04 0a 13  18 48 61 72 72 79 20 52  
>0...U....Harry R
>  00d0:  75 65 74 65 72 20 44 65  76 65 6c 6f 70 6d 65 6e   ueter
>Developmen
>  00e0:  74 31 14 30 12 06 03 55  04 0b 13 0b 43 41 41 55  
>t1.0...U....CAAU
>  00f0:  54 48 4f 52 49 54 59 31  19 30 17 06 03 55 04 03  
>THORITY1.0...U..
>  0100:  13 10 34 38 36 64 78 36  36 2e 68 72 6e 65 74 2e  
>..486dx66.hrnet.
>  0110:  64 65 31 1d 30 1b 06 09  2a 86 48 86 f7 0d 01 09  
>de1.0...*.H.....
>  0120:  01 16 0e 68 61 72 72 79  40 68 72 6e 65 74 2e 64  
>...harry@hrnet.d
>  0130:  65 30 1e 17 0d 30 32 30  38 32 30 32 30 30 38 34  
>e0...02082020084
>  0140:  31 5a 17 0d 30 33 30 38  32 30 32 30 30 38 34 31  
>1Z..030820200841
>  0150:  5a 30 81 b3 31 0b 30 09  06 03 55 04 06 13 02 44  
>Z0..1.0...U....D
>  0160:  45 31 10 30 0e 06 03 55  04 08 13 07 47 65 72 6d  
>E1.0...U....Germ
>  0170:  61 6e 79 31 22 30 20 06  03 55 04 07 13 19 4e 69   any1"0
>..U....Ni
>  0180:  65 64 65 72 6e 68 61 75  73 65 6e 2d 4f 62 65 72  
>edernhausen-Ober
>  0190:  6a 6f 73 62 61 63 68 31  21 30 1f 06 03 55 04 0a  
>josbach1!0...U..
>  01a0:  13 18 48 61 72 72 79 20  52 75 65 74 65 72 20 44   ..Harry
>Rueter D
>  01b0:  65 76 65 6c 6f 70 6d 65  6e 74 31 11 30 0f 06 03  
>evelopment1.0...
>  01c0:  55 04 0b 13 08 4b 65 79  6d 61 6b 65 72 31 19 30  
>U....Keymaker1.0
>  01d0:  17 06 03 55 04 03 13 10  34 38 36 64 78 36 36 2e  
>...U....486dx66.
>  01e0:  68 72 6e 65 74 2e 64 65  31 1d 30 1b 06 09 2a 86  
>hrnet.de1.0...*.
>  01f0:  48 86 f7 0d 01 09 01 16  0e 68 61 72 72 79 40 68  
>H........harry@h
>  0200:  72 6e 65 74 2e 64 65 30  82 01 22 30 0d 06 09 2a  
>rnet.de0.."0...*
>  0210:  86 48 86 f7 0d 01 01 01  05 00 03 82 01 0f 00 30  
>.H.............0
>  0220:  82 01 0a 02 82 01 01 00  ca e6 3e 89 4d 4f 42 5e  
>..........>.MOB^
>  0230:  ec 37 cd a0 19 d9 1a 9b  15 65 b2 e9 d3 c1 0c e9  
>.7.......e......
>  0240:  9f f8 2f 5f ec 2d 9e 31  f7 55 40 78 2a b6 f2 6c  
>../_.-.1.U@x*..l
>  0250:  e6 8f e8 93 f4 fd e9 51  92 ce 33 bd 27 6c f9 f2  
>.......Q..3.'l..
>  0260:  f1 ff 2d 10 4f 8d 86 9b  fd 41 96 c8 3f 5b 21 bb  
>..-.O....A..?[!.
>  0270:  57 e1 a7 7c 5f 27 c1 b4  cb c1 8e c1 00 4b 10 d6  
>W..|_'.......K..
>  0280:  5d fb ad 44 a5 07 ae 81  fd b9 72 fb e4 ce 49 16  
>]..D......r...I.
>  0290:  3f b2 3d 2f 5a 53 f0 a8  83 11 51 cf d8 62 4e ef  
>?.=/ZS....Q..bN.
>  02a0:  14 ed c5 06 a2 f7 d9 86  16 63 08 a7 f9 2a e3 f5  
>.........c...*..
>  02b0:  14 85 42 b7 27 2f 3f 8d  34 27 00 14 c9 8e 92 29  
>..B.'/?.4'.....)
>  02c0:  18 da 6d 30 16 5c a9 ec  32 e5 42 c1 77 89 6d ff  
>..m0.\..2.B.w.m.
>  02d0:  af ed 96 c3 7c a1 16 89  b2 43 e3 02 6b 56 d9 98  
>....|....C..kV..
>  02e0:  53 4c f9 5b c9 e3 5b 29  07 90 72 9f d6 dd 42 1f  
>SL.[..[)..r...B.
>  02f0:  46 8a 03 1e f0 3c 31 a8  82 94 b6 5e 9a 0f f4 80  
>F....<1....^....
>  0300:  e1 3a 7b 68 84 ed 51 42  42 93 98 80 06 8b a7 06  
>.:{h..QBB.......
>  0310:  ca d5 7f 8b 29 1f cd a8  6f d5 e6 7d 81 30 3c 37  
>....)...o..}.0<7
>  0320:  43 ae 4d a3 91 cd 74 b1  02 03 01 00 01 30 0d 06  
>C.M...t......0..
>  0330:  09 2a 86 48 86 f7 0d 01  01 04 05 00 03 82 01 01  
>.*.H............
>  0340:  00 96 d3 09 b4 39 24 ec  78 2d f4 c7 b8 74 8c 4e  
>.....9$.x-...t.N
>  0350:  92 21 96 20 85 06 8e 3f  f6 56 07 79 da 69 ec 5a   .!.
>...?.V.y.i.Z
>  0360:  62 2d 3d 51 87 f6 52 7e  72 00 5b ed 88 c5 4d f1  
>b-=Q..R~r.[...M.
>  0370:  39 0e 62 22 b0 e1 b8 3f  97 ae 65 08 d7 86 49 c3  
>9.b"...?..e...I.
>  0380:  65 ab 4f f0 1f dc 62 22  07 a9 7b f9 c2 d6 fd 72  
>e.O...b"..{....r
>  0390:  89 c6 7b fe c9 46 2c 0b  b5 4d fc e8 e3 12 24 02  
>..{..F,..M....$.
>  03a0:  e5 e5 cc d8 c3 5c 4d f1  f4 5b 44 a4 7d 32 33 fe  
>.....\M..[D.}23.
>  03b0:  74 e3 89 ed ad d5 08 33  06 a3 1e 34 a6 aa b1 70  
>t......3...4...p
>  03c0:  a0 1e 03 0f 58 9e 17 a4  d7 51 be 8f 61 15 2f 9b  
>....X....Q..a./.
>  03d0:  99 43 c4 60 4f 56 3f 32  1b 55 80 9c ec 52 91 c1  
>.C.`OV?2.U...R..
>  03e0:  2f 9d 5b f0 76 91 d0 e4  17 45 75 ff 7b 39 23 40  
>/.[.v....Eu.{9#@
>  03f0:  5d cd 35 40 ce 01 20 ae  8f f3 0e 85 30 6b bd ec   ].5@..
>.....0k..
>  0400:  cd 57 14 79 8d 35 81 aa  e4 cb 96 af 0e 51 45 26  
>.W.y.5.......QE&
>  0410:  42 b2 2a 1b 5b 0b 35 eb  36 5b 0a 27 9c de 1f 16  
>B.*.[.5.6[.'....
>  0420:  b1 ab b1 a6 e5 50 54 80  7a e6 e1 d6 e1 26 9f a8  
>.....PT.z....&..
>  0430:  1b 08 32 a7 8c 1e df 63  40 45 7d be da ea 72 31  
>..2....c@E}...r1
>  0440:  39 00 03 e6 30 82 03 e2  30 82 02 ca 02 01 00 30  
>9...0...0......0
>  0450:  0d 06 09 2a 86 48 86 f7  0d 01 01 04 05 00 30 81  
>...*.H........0.
>  0460:  b6 31 0b 30 09 06 03 55  04 06 13 02 44 45 31 10  
>.1.0...U....DE1.
>  0470:  30 0e 06 03 55 04 08 13  07 47 65 72 6d 61 6e 79  
>0...U....Germany
>  0480:  31 22 30 20 06 03 55 04  07 13 19 4e 69 65 64 65   1"0
>..U....Niede
>  0490:  72 6e 68 61 75 73 65 6e  2d 4f 62 65 72 6a 6f 73  
>rnhausen-Oberjos
>  04a0:  62 61 63 68 31 21 30 1f  06 03 55 04 0a 13 18 48  
>bach1!0...U....H
>  04b0:  61 72 72 79 20 52 75 65  74 65 72 20 44 65 76 65   arry Rueter
>Deve
>  04c0:  6c 6f 70 6d 65 6e 74 31  14 30 12 06 03 55 04 0b  
>lopment1.0...U..
>  04d0:  13 0b 43 41 41 55 54 48  4f 52 49 54 59 31 19 30  
>..CAAUTHORITY1.0
>  04e0:  17 06 03 55 04 03 13 10  34 38 36 64 78 36 36 2e  
>...U....486dx66.
>  04f0:  68 72 6e 65 74 2e 64 65  31 1d 30 1b 06 09 2a 86  
>hrnet.de1.0...*.
>  0500:  48 86 f7 0d 01 09 01 16  0e 68 61 72 72 79 40 68  
>H........harry@h
>  0510:  72 6e 65 74 2e 64 65 30  1e 17 0d 30 32 30 38 32  
>rnet.de0...02082
>  0520:  30 32 30 30 37 35 38 5a  17 0d 30 35 30 35 31 35  
>0200758Z..050515
>  0530:  32 30 30 37 35 38 5a 30  81 b6 31 0b 30 09 06 03  
>200758Z0..1.0...
>  0540:  55 04 06 13 02 44 45 31  10 30 0e 06 03 55 04 08  
>U....DE1.0...U..
>  0550:  13 07 47 65 72 6d 61 6e  79 31 22 30 20 06 03 55   ..Germany1"0
>..U
>  0560:  04 07 13 19 4e 69 65 64  65 72 6e 68 61 75 73 65  
>....Niedernhause
>  0570:  6e 2d 4f 62 65 72 6a 6f  73 62 61 63 68 31 21 30  
>n-Oberjosbach1!0
>  0580:  1f 06 03 55 04 0a 13 18  48 61 72 72 79 20 52 75  
>...U....Harry Ru
>  0590:  65 74 65 72 20 44 65 76  65 6c 6f 70 6d 65 6e 74   eter
>Development
>  05a0:  31 14 30 12 06 03 55 04  0b 13 0b 43 41 41 55 54  
>1.0...U....CAAUT
>  05b0:  48 4f 52 49 54 59 31 19  30 17 06 03 55 04 03 13  
>HORITY1.0...U...
>  05c0:  10 34 38 36 64 78 36 36  2e 68 72 6e 65 74 2e 64  
>.486dx66.hrnet.d
>  05e0:  16 0e 68 61 72 72 79 40  68 72 6e 65 74 2e 64 65  
>..harry@hrnet.de
>  05f0:  30 82 01 22 30 0d 06 09  2a 86 48 86 f7 0d 01 01  
>0.."0...*.H.....
>  0600:  01 05 00 03 82 01 0f 00  30 82 01 0a 02 82 01 01  
>........0.......
>  0610:  00 a5 eb ef dc c2 46 3d  6e f6 3d 6c 28 75 a1 ec  
>......F=n.=l(u..
>  0620:  8b e7 a0 cc 7e 75 b9 95  11 f0 89 1f 22 f0 53 06  
>....~u......".S.
>  0630:  7f 51 b6 d3 8a df 17 55  8b f4 a7 c7 93 15 7e 02  
>.Q.....U......~.
>  0640:  28 dc 6b 1d 83 b2 58 0f  06 bf 47 75 ca 34 9c ec  
>(.k...X...Gu.4..
>  0650:  6b fd e7 2a d2 60 86 e8  09 b3 85 c5 25 23 32 eb  
>k..*.`......%#2.
>  0660:  5c 92 42 7f 41 ae 6c d1  d6 1e 03 cc a6 88 6c 20  
>\.B.A.l.......l
>  0670:  18 57 d0 6f ff e8 e7 78  dd 1a 1d b2 de ce 7b d1  
>.W.o...x......{.
>  0680:  02 69 be ee 90 61 39 3b  6a 9b 29 66 49 95 f8 c1  
>.i...a9;j.)fI...
>  0690:  53 35 75 77 d4 60 15 86  5d c2 44 83 37 e7 bc 1c  
>S5uw.`..].D.7...
>  06a0:  a1 32 b1 20 59 41 b2 e3  6c d3 e5 23 69 df f4 dd   .2.
>YA..l..#i...
>  06b0:  a4 56 90 0f de 0a 99 32  99 6a 26 ca 4e c2 32 1c  
>.V.....2.j&.N.2.
>  06c0:  45 e6 32 7b 36 95 26 70  09 91 79 ab c0 25 a5 61  
>E.2{6.&p..y..%.a
>  06d0:  b8 06 76 77 bc 5a c5 68  91 ae d8 14 84 39 a2 44  
>..vw.Z.h.....9.D
>  06e0:  e1 6a 04 2e 35 b5 40 17  db c7 d8 e3 1f 69 ec c6  
>.j..5.@......i..
>  06f0:  3a e6 56 a5 08 05 6f 1a  c6 62 14 b6 c6 db 28 8c  
>:.V...o..b....(.
>  0700:  00 8e d8 50 2b ff a9 ea  fb 76 96 9c d7 4f 5e 07  
>...P+....v...O^.
>  0710:  7f 02 03 01 00 01 30 0d  06 09 2a 86 48 86 f7 0d  
>......0...*.H...
>  0720:  01 01 04 05 00 03 82 01  01 00 9b 87 fb a0 47 32  
>..............G2
>  0730:  08 1b 16 f7 6d 76 da 46  43 5c 77 d0 5f b4 29 cd  
>....mv.FC\w._.).
>  0740:  fd fa 1d 24 c8 f1 5d cf  b1 8d 76 a0 24 97 f3 7c  
>...$..]...v.$..|
>  0750:  ad 13 ac a8 6d 27 09 a8  48 a8 fb a0 38 1b 16 93  
>....m'..H...8...
>  0760:  e7 f9 7d 3b 6d 93 49 36  79 24 95 6d 3f e4 54 4d  
>..};m.I6y$.m?.TM
>  0770:  87 4f 82 62 ab 6c 7b 0b  03 16 c6 a4 d3 92 d3 f3  
>.O.b.l{.........
>  0780:  da 9c fc b7 f4 4c de 2e  72 99 72 1a aa 4c 61 3d  
>.....L..r.r..La=
>  0790:  e3 6c 56 37 4a f5 d7 52  b0 83 6b 89 ef db 3b ed  
>.lV7J..R..k...;.
>  07a0:  d9 8e 69 15 66 5e 18 ac  85 a1 2d 2f 1e 15 90 f3  
>..i.f^....-/....
>  07b0:  80 d9 b8 56 fa 75 41 c5  69 ec d0 ae 89 47 ab 32  
>...V.uA.i....G.2
>  07c0:  f7 e4 48 df e6 50 73 0e  34 0f 68 9d c6 0e 5d 70  
>..H..Ps.4.h...]p
>  07d0:  57 ec 43 3c 9c 92 8e 2b  96 a8 e5 4e 62 f5 ba ce  
>W.C<...+...Nb...
>  07e0:  5a ed c1 0a d2 b3 90 fd  7e f6 69 e8 2a ee d7 ac  
>Z.......~.i.*...
>  07f0:  b9 db 3a 04 d3 b5 58 9d  7f a7 ac ab b6 8e 1c f0  
>..:...X.........
>  0800:  34 a7 09 ce 0d b3 22 6e  b6 8f e1 8c 6c c8 9a 26  
>4....."n....l..&
>  0810:  24 5a bd a9 54 5c 57 e7  a7 08 20 f4 8c 5b 3e dd   $Z..T\W...
>..[>.
>  0820:  88 46 d8 11 d7 82 27 10  9d 28 16 03 01 00 04 0e  
>.F....'..(......
>  0830:  00 00 00                                           ...
>TLS trace: SSL_accept:SSLv3 flush data
>tls_read: want=5 error=Resource temporarily unavailable
>TLS trace: SSL_accept:error in SSLv3 read client certificate A
>TLS trace: SSL_accept:error in SSLv3 read client certificate A
>daemon: select: listen=6 active_threads=0 tvp=NULL
>daemon: select: listen=7 active_threads=0 tvp=NULL
>daemon: activity on 1 descriptors
>daemon: activity on: 13r
>daemon: read activity on 13
>connection_get(13)
>connection_get(13): got connid=0
>connection_read(13): checking for input on id=0
>tls_read: want=5, got=5
>  0000:  16 03 01 01 06                                     .....
>tls_read: want=262, got=262
>  0000:  10 00 01 02 01 00 ad 47  87 05 df be 28 21 8e 9a  
>.......G....(!..
>  0010:  7c 64 98 2f 17 39 6e 25  48 52 9b 67 76 26 18 8d  
>|d./.9n%HR.gv&..
>  0020:  60 57 6a d5 08 f1 4b 66  ef 19 51 18 01 eb 09 a2  
>`Wj...Kf..Q.....
>  0030:  68 44 21 15 6f 38 88 6b  66 40 5b 31 e9 40 2f 1a  
>hD!.o8.kf@[1.@/.
>  0040:  be 5b 61 ba dd 9b 82 04  4c 8a 26 d5 28 20 38 3a  
>.[a.....L.&.( 8:
>  0050:  84 f5 ac 46 94 b8 f0 54  05 27 cf 14 63 cd d4 10  
>...F...T.'..c...
>  0060:  8a 09 4d 11 55 0c ad 62  77 c3 79 0f c2 14 d8 35  
>..M.U..bw.y....5
>  0070:  bc 5e 01 c4 73 e1 b4 ea  83 26 ec 97 ce ae 4d 39  
>.^..s....&....M9
>  0080:  6d 73 29 a0 73 17 e5 b6  34 e4 0d 98 fd 09 d5 07  
>ms).s...4.......
>  0090:  f0 fb 38 b7 0a f0 cf 82  d9 7c 07 aa a0 a3 0b c8  
>..8......|......
>  00a0:  f0 92 0b 4e cc 4a 02 e0  51 9a 1a 02 2d bc 32 9b  
>...N.J..Q...-.2.
>  00b0:  00 1f fb 79 96 eb 04 9a  e4 e3 5c f3 ad 1a e9 92  
>...y......\.....
>  00c0:  82 e9 10 68 e9 ff 64 c0  99 70 50 1d 9f 0a bb 1d  
>...h..d..pP.....
>  00d0:  86 ce 46 2d 67 5c fe 3d  84 54 15 53 ef b2 15 26  
>..F-g\.=.T.S...&
>  00e0:  48 99 14 ce 04 87 bc 8d  d1 fb 25 83 91 48 93 14  
>H.........%..H..
>  00f0:  b8 05 9b 1e f4 71 00 5c  58 36 40 23 60 a7 04 c4  
>.....q.\X6@#`...
>  0100:  39 c7 1f e1 a1 9c                                  9.....
>TLS trace: SSL_accept:SSLv3 read client key exchange A
>tls_read: want=5, got=5
>  0000:  14 03 01 00 01                                     .....
>tls_read: want=1, got=1
>  0000:  01                                                 .
>tls_read: want=5, got=5
>  0000:  16 03 01 00 28                                     ....(
>tls_read: want=40, got=40
>  0000:  44 1b 95 a3 59 af a8 0f  d3 47 8f 02 ea 77 22 53  
>D...Y....G...w"S
>  0010:  5f 96 a4 6a 8d ac 2a e9  45 69 8c 9c e1 34 33 08  
>_..j..*.Ei...43.
>  0020:  db 2e c5 21 7a 93 d5 32                            ...!z..2
>
>---snipp---
>
>My /root/ldaprc (cause i tried this as root-user) :
>
>---snipp---
>BASE dc=hrnet,dc=de
>HOST  486dx66.hrnet.de:5636
>binddn o=myorganization,dc=hrnet,dc=de
>bindpw something
>rootbinddn cn=root,dc=hrnet,dc=de
>TLS hard
>TLS_CERT     /etc/certificates/486dx66.crt
>TLS_KEY      /etc/certificates/486dx66.key
>TLS_CACERT   /etc/certificates/CA.crt
>
>---snipp---
>
>
>So, what's wrong ?
>
>When i start a ssl-connection from another host
>(with LDAP-Browser 2.8.2) everything is fine
>and i can browse my directory without problems ..
>
>
>Greets Harry