[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: openldap and tls

To: Dave <dmehler26@woh.rr.com>
Subject: Re: openldap and tls
From: Michael Ströder <michael@stroeder.com>
Date: Thu, 14 Feb 2008 11:29:59 +0100
Cc: openldap-software@openldap.org
In-reply-to: <003b01c86ee4$b6c67f40$0200a8c0@satellite>
References: <003b01c86ee4$b6c67f40$0200a8c0@satellite>
User-agent: Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.8.1.11) Gecko/20071128 SeaMonkey/1.1.7

Dave wrote:

I'm still having issues with tls, getting a openldap 2.4 client and server to talk tls to each other.

> [..]

routines:SSL3_GET_CLIENT_CERTIFICATE:peer did notreturn a certificate

You've configured your server slapd that it requests the client to authenticate with a client certificate during TLS negotiation. But the client does not have a client certificate.

See man 5 slapd.conf for learning about what option TLSVerifyClient means.

Ciao, Michael.

References:
- openldap and tls
  - From: "Dave" <dmehler26@woh.rr.com>

Prev by Date: Re: GSSAPI auth missing?
Next by Date: Re: Restricted/controlled simple bind
Index(es):
- Chronological
- Thread