[Date Prev][Date Next] [Chronological] [Thread] [Top]

RE: Strange behavior with TLS with self-signed certs

To: Andreas Ntaflos <daff@pseudoterminal.org>, "openldap-technical@openldap.org" <openldap-technical@openldap.org>
Subject: RE: Strange behavior with TLS with self-signed certs
From: Chris Jacobs <Chris.Jacobs@apollogrp.edu>
Date: Fri, 7 Jan 2011 12:02:17 -0700
Accept-language: en-US
Acceptlanguage: en-US
Content-language: en-US
In-reply-to: <201101071945.50066.daff@pseudoterminal.org>
References: <COL104-W405D02C17B44F993100E61D40B0@phx.gbl> <201101071945.50066.daff@pseudoterminal.org>
Thread-index: AcuumzSyZoUTJNn4SYeRRXPfC5zKwgAAhYEw
Thread-topic: Strange behavior with TLS with self-signed certs

Yeah, that's the trick though.  The OP indicated if they used uri ldap://[hostname] StartTLS doesn't work.

- chris

-----Original Message-----
From: openldap-technical-bounces@OpenLDAP.org [mailto:openldap-technical-bounces@OpenLDAP.org] On Behalf Of Andreas Ntaflos
Sent: Friday, January 07, 2011 10:46 AM
To: openldap-technical@openldap.org
Subject: Re: Strange behavior with TLS with self-signed certs

On Friday 07 January 2011 04:18:40 Michael Starling wrote:
> #TLS settings
> ssl start_tls
> ssl on

That should be either "ssl start_tls" OR "ssl on", not both. If you specify "ssl start_tls" then you should use the ldap:// URL schema, if you specify "ssl on" then you should use ldaps://.

Andreas

This message is private and confidential. If you have received it in error, please notify the sender and remove it from your system.

References:
- Strange behavior with TLS with self-signed certs
  - From: Michael Starling <mlstarling31@hotmail.com>
- Re: Strange behavior with TLS with self-signed certs
  - From: Andreas Ntaflos <daff@pseudoterminal.org>

Prev by Date: Re: Emergency recovery strategy needed by novice
Next by Date: Re: Emergency recovery strategy needed by novice
Index(es):
- Chronological
- Thread