problem with ldap_start_tls_s

["Sankhadip Sengupta" <sdsgupta@cs.utah.edu>]

Hi everyone,

 

                 I am trying to write an LDAP browser that uses both plain text and TLS.The plain text works fine but when I am using "ldap_start_tls_s" I get an error:

 

ldap_start_tls: Connect error (-11) additional info: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

 

Also just to note ldapsearch works fine.

 

ldapsearch -vLxZZ -b "dc=example,dc=com" "(objectClass=*)"

 

no problem with this.

 

My code fragment is below:

 

if ((ld = ldap_init(ldap_host, LDAP_PORT)) == NULL ) {

perror( "ldap_init failed" );

exit( EXIT_FAILURE );

}

/* set the LDAP version to be 3 */

if (ldap_set_option(ld, LDAP_OPT_PROTOCOL_VERSION, &desired_version) != LDAP_OPT_SUCCESS)

{

ldap_perror(ld, "ldap_set_option");

exit(EXIT_FAILURE);

}

if(ldap_start_tls_s(ld,NULL,NULL)!=LDAP_SUCCESS)

 {

 ldap_perror(ld, "ldap_start_tls");

exit(EXIT_FAILURE);

}

Please help :(

 

Thanks,

 

Shawn