[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Can't get TLS working.

To: openldap-technical@openldap.org
Subject: Re: Can't get TLS working.
From: "Dieter Kluenter" <dieter@dkluenter.de>
Date: Thu, 16 Sep 2010 10:17:11 +0200
In-reply-to: <AANLkTi=nFXFeRhvWcp7C35W3UVY=Uxmq=-OQ++v9ARZv@mail.gmail.com> (c0re's message of "Thu, 16 Sep 2010 11:34:13 +0400")
References: <AANLkTin+sius-b60ZxjEVD_mm9VL1ghgB7icnQSyMao8@mail.gmail.com> <87hbhro466.fsf@magenta.l4b.de> <AANLkTimcMyaSRBqXJmGJjX0Ogb_yw3gxex83OoiWuSLF@mail.gmail.com> <874odrnvc0.fsf@magenta.l4b.de> <AANLkTi=9MPcpvOUaY_4RUJBts=VhJsyPmucebvf2uQcG@mail.gmail.com> <87vd67makp.fsf@magenta.l4b.de> <AANLkTikuQQUzk3XcBt7yxNj=Y=GVVPKusRedBerSvgKX@mail.gmail.com> <87k4mnm5qi.fsf@magenta.l4b.de> <19780B47470D564F87B2BE2169510466CC6D123745@SME1018.dom1.e-ssi.net> <AANLkTi=Sq5wTaad5Y989eUv_qs51RdmzYQ0ukv9jthiX@mail.gmail.com> <87eicuw3tp.fsf@magenta.l4b.de> <AANLkTi=nFXFeRhvWcp7C35W3UVY=Uxmq=-OQ++v9ARZv@mail.gmail.com>
User-agent: Gnus/5.1008 (Gnus v5.10.8) XEmacs/21.5-b29 (linux)

c0re <nr1c0re@gmail.com> writes:

> I tryed to test with ldapsearch, but it ignores ldap.conf somehow
> (where CA certificate defined) and I always recieve
>         additional info: error:14090086:SSL
> routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed (self
> signed certificate in certificate chain)
> Tryed with ldapsearch -Z -d 1 -h ldap.domain.com
[...]

ldapsearch is not ignoring ldap.conf, it always looks for this file
either in the built in path, or the environment variables LDAPRC and
LDAPCONF. It seems, you have placed ldap.conf in a non appropriate
directory. 

-Dieter

-- 
Dieter Klünter | Systemberatung
sip: 7770535@sipgate.de 
http://www.dpunkt.de/buecher/2104.html
GPG Key ID:8EF7B6C6

Follow-Ups:
- Re: Can't get TLS working.
  - From: c0re <nr1c0re@gmail.com>

References:
- Can't get TLS working.
  - From: c0re <nr1c0re@gmail.com>
- Re: Can't get TLS working.
  - From: "Dieter Kluenter" <dieter@dkluenter.de>
- Re: Can't get TLS working.
  - From: c0re <nr1c0re@gmail.com>
- Re: Can't get TLS working.
  - From: "Dieter Kluenter" <dieter@dkluenter.de>
- Re: Can't get TLS working.
  - From: c0re <nr1c0re@gmail.com>
- Re: Can't get TLS working.
  - From: "Dieter Kluenter" <dieter@dkluenter.de>
- Re: Can't get TLS working.
  - From: c0re <nr1c0re@gmail.com>
- Re: Can't get TLS working.
  - From: "Dieter Kluenter" <dieter@dkluenter.de>
- RE: Can't get TLS working.
  - From: "Wallus, Harald Dr." <Harald.Wallus@eon.com>
- Re: Can't get TLS working.
  - From: c0re <nr1c0re@gmail.com>
- Re: Can't get TLS working.
  - From: "Dieter Kluenter" <dieter@dkluenter.de>
- Re: Can't get TLS working.
  - From: c0re <nr1c0re@gmail.com>

Prev by Date: Re: Can't get TLS working.
Next by Date: Re: Can't get TLS working.
Index(es):
- Chronological
- Thread