[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: TLS/SSL and self-signed certificates

To: openldap-software@openldap.org
Subject: Re: TLS/SSL and self-signed certificates
From: "Dieter Kluenter" <dieter@dkluenter.de>
Date: Thu, 09 Jul 2009 17:23:51 +0200
In-reply-to: <4A553854.5050300@socal.rr.com> (Rick Stevens's message of "Wed, 08 Jul 2009 17:22:44 -0700")
References: <4A553854.5050300@socal.rr.com>
User-agent: Gnus/5.1008 (Gnus v5.10.8) XEmacs/21.5-b28 (linux)

Rick Stevens <rps2@socal.rr.com> writes:

> I know this has been hashed over before, but I simply cannot get my
> LDAP clients to talk TLS/SSL to my LDAP server.  I keep getting
>
> 	TLS certificate verification: Error, self signed certificate in
> 	certificate chain

This error may not be the culprit, if the error (or warning) is
referring to the CA.
What is the CN of the server certificate and what is the host part of
your search string?
In order to debug the TLS session run ldapsearch with -d3 option.

-Dieter

-- 
Dieter Klünter | Systemberatung
http://dkluenter.de
GPG Key ID:8EF7B6C6
53°08'09,95"N
10°08'02,42"E

Follow-Ups:
- Re: TLS/SSL and self-signed certificates
  - From: Howard Chu <hyc@symas.com>

References:
- TLS/SSL and self-signed certificates
  - From: Rick Stevens <rps2@socal.rr.com>

Prev by Date: Re: TLS/SSL and self-signed certificates
Next by Date: Re: LDAP add *.ldif errors
Index(es):
- Chronological
- Thread