[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: TLS/SSL and self-signed certificates

To: openldap-software@openldap.org
Subject: Re: TLS/SSL and self-signed certificates
From: "Dieter Kluenter" <dieter@dkluenter.de>
Date: Fri, 10 Jul 2009 17:58:58 +0200
In-reply-to: <4A564613.4070006@socal.rr.com> (Rick Stevens's message of "Thu, 09 Jul 2009 12:33:39 -0700")
References: <4A553854.5050300@socal.rr.com> <87bpnt283c.fsf@rubin.avci.de> <4A5636F4.8010107@socal.rr.com> <874otlr7qq.fsf@rubin.avci.de> <4A564613.4070006@socal.rr.com>
User-agent: Gnus/5.1008 (Gnus v5.10.8) XEmacs/21.5-b28 (linux)

Rick Stevens <rps2@socal.rr.com> writes:

> Dieter Kluenter wrote:
>> Hi,
[...]
>> OK, could you please provide the TLS related entries of slapd.conf
>> and ldap.conf? It seems that the server is not providing a server
>> certificate but a CA.
>
> Okey doke.  Here they are:
>
> TLSCACertificateFile    /usr/local/etc/openldap/gbsbilling-cert.pem
> TLSCertificateFile      /usr/local/etc/openldap/bigdog-cert.pem
> TLSCertificateKeyFile   /usr/local/etc/openldap/bigdog-key.pem

This is only the content of slapd.conf, the relevant content of
ldap.conf(5) is still missing, ldapsearch requires at least the path
to CA, further information on the level of certificate checks and the
prefered cipher suits are recommended options.

-Dieter 

-- 
Dieter Klünter | Systemberatung
http://dkluenter.de
GPG Key ID:8EF7B6C6
53°08'09,95"N
10°08'02,42"E

References:
- TLS/SSL and self-signed certificates
  - From: Rick Stevens <rps2@socal.rr.com>
- Re: TLS/SSL and self-signed certificates
  - From: "Dieter Kluenter" <dieter@dkluenter.de>
- Re: TLS/SSL and self-signed certificates
  - From: "Dieter Kluenter" <dieter@dkluenter.de>

Prev by Date: Re: TLS/SSL and self-signed certificates
Next by Date: Re: TLS/SSL and self-signed certificates
Index(es):
- Chronological
- Thread