Re: TLS + SSL and openldap

[Bjørn Ruberg <bjorn@ruberg.no>]

Dieter Kluenter wrote:
> Bruno Steven <aspenbr@gmail.com> writes:
>
>   
> > Hi, 
> >
> > I am trying configure openldap work with tls , but I have two question about this, first
> > when I use tls openldap use port 389 and ssl port 639 , is this correct ? 
> > Second How I can test connection between client and server, cryptography is working ? 
> >     
>
> There is no ssl port! SSL (Secure Socket Layer) is a proprietary,
> licence based protocol, owned by Netscape? I don't know whether the
> IPR of this protocol have been part of the Netscape/AOL deal. OpenLDAP,
> and most other network based applications, have implemented Transport
> Layer Security (TLS), RFC 2246. As a LPI certified professional you
> should be aware of this.
>   

[citation needed]

> OpenLDAP uses port 639, which has not been assigned by IANA to LDAP(S)
> protocol, as TLS-enabled port. Port 389 is still required for the LDAP
> extended operation startTLS (RFC-4513).
>   

# getent services ldaps
ldaps                 636/tcp

In my experience, OpenLDAP has no problems listening to port 636 as an 
SSL enabled port. TLS (using STARTTLS) runs on 389.

-
Bjørn