[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Configuring TLS

To: James Hartley <james.hartley@gmail.com>
Subject: Re: Configuring TLS
From: Jay Chandler <chandler.lists@chapman.edu>
Date: Wed, 25 Jul 2007 16:08:25 -0700
Cc: openldap-software@openldap.org
In-reply-to: <A06051B5EA7C8B1545584EBE@[192.168.1.3]>
References: <46A7A124.4070109@chapman.edu> <8217e8cc0707251302v677ca28dyc7748b47731f3300@mail.gmail.com> <46A7B2D7.1090308@chapman.edu> <46A7C1B4.4010908@chapman.edu> <A06051B5EA7C8B1545584EBE@[192.168.1.3]>
User-agent: Thunderbird 2.0.0.5 (X11/20070723)

Quanah Gibson-Mount wrote:

--On Wednesday, July 25, 2007 2:33 PM -0700 Jay Chandler <chandler.lists@chapman.edu> wrote:
Probably worth mentioning the lines from slapd.conf:
TLSCipherSuite HIGH:MEDIUM:+SSLv2
TLSCACertificateFile /usr/local/etc/openldap/cacert.pem
TLSCertificateFile /usr/local/etc/openldap/servercrt.pem
TLSCertificateKeyFile /usr/local/etc/openldap/serverkey.pem
All files exist, and appear to be correct.
And are they readable by the slapd user?

Oh jeez-- that got it.

Thanks!

--Jay

References:
- Configuring TLS
  - From: Jay Chandler <chandler.lists@chapman.edu>
- Re: Configuring TLS
  - From: Jay Chandler <chandler.lists@chapman.edu>
- Re: Configuring TLS
  - From: Jay Chandler <chandler.lists@chapman.edu>
- Re: Configuring TLS
  - From: Quanah Gibson-Mount <quanah@zimbra.com>

Prev by Date: Re: Configuring TLS
Next by Date: Re: failover config: servers with same DNS address and TLS, subjectAltName extension
Index(es):
- Chronological
- Thread