Re: TLS handshake failure

[Howard Chu <hyc@symas.com>]

Michael StrÃder wrote:
> Esther Puente wrote:
> > I follow the instructions in
> > http://www.openldap.org/faq/data/cache/185.html and in other
> > tutorials from the Web for activate TLS and use a CA and I can't get it
> > works right. The error I obtained is a "Handshake failure".
>
> There should be an additional message displayed there detailing the
> cause of the failure. Most likely something's wrong with path names in
> cert configuration.

As the ldap.conf(5) manpage states, TLS_CERT/TLS_KEY are not valid in 
ldap.conf, only in ldaprc.
--
  -- Howard Chu
  Chief Architect, Symas Corp.  http://www.symas.com
  Director, Highland Sun        http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP     http://www.openldap.org/project/