Problems Connecting via ldaps://

[Matt Juszczak <matt@atopia.net>]

Hello All,

I've followed the document below word for word:

http://www.openldap.org/pub/ksoper/OpenLDAP_TLS_howto.html

The test at the end with the following syntax with my variables filled 
in also works successfully, I get success on the local machine and also 
in my slapd.conf file.

|*openssl s_client -connect myserver.com:636 -state \
-CAfile /var/cacert/cacert.pem \
-cert /home/ldap-user/certs/client.cert.pem \
-key /home/ldap-user/certs/keys/client.key.pem*||

However, my ldap.conf file doesn't seem to want to work when I try to 
connect from the client server (our mail server) to the ldap server 
(ldap1).  I am getting the following error in debug level -1 from 
slapd.conf:

||** |TLS trace: SSL_accept:before/accept initialization
tls_read: want=11, got=11
 0000:  30 4a 02 01 01 60 45 02  01 03 04                  0J...`E....
TLS trace: SSL_accept:error in SSLv2/v3 read client hello A
TLS: can't accept.
TLS: error:140760FC:SSL routines:SSL23_GET_CLIENT_HELLO:unknown protocol 
/usr/src/secure/lib/libssl/../../../crypto/openssl/ssl/s23_srvr.c:585
connection_read(8): TLS accept error error=-1 id=69, closing
connection_closing: readying conn=69 sd=8 for close
connection_close: conn=69 sd=8



Are there any ideas?

Thanks,

Regards,

Matt
|**|