Re: Problem with connecting via SSL from remote host

[Dylan Martin <dmartin@seattlecentral.org>]

Maybe your SSL is working and it's something bind related that's causing
trouble.  Can you try simplifying the bind process to take it out of the
equation?  Set up for and try an anonymous bind, for example?  Can you
connect the regular ldap port and turn on TLS?

Dylan Martin
Unix Admin
Seattle Central Community College

> On Mon, Oct 20, 2003 at 07:31:31PM +0200, suomi hasler wrote:
> 
> > do you have something similar to
> > 
> > # TLS
> > TLSCertificateFile /usr/local/openldap/cert/ldap.cert.pem
> > TLSCertificateKeyFile /usr/local/openldap/cert/ldap.cert.key
> > TLSCACertificateFile /etc/ssl/certs/ca-cert.pem
> > TLSVerifyClient never
> > 
> > in your slapd.conf?
> 
> Yep - I imagine that if I didn't, I wouldn't be able to make ldaps
> connections from the local machine. I've also got the CA Certificate
> line in /etc/ldap/ldap.conf (Debian) on both clients, and the CA
> certificate file is in the right place.
> 
> Alex
>