Re: Syncrepl can't start ssl session because of refused 'client' certificate

[Thibault Le Meur <Thibault.LeMeur@supelec.fr>]

Hello,

Le 12/07/2011 04:34, Rich Megginson a écrit :
> > > > working in openssl.
> > > Done: ITS#6994
> >
> > Sounds to me like there's no bug here and the ITS report is invalid. 
> > If you want separate TLS settings for syncrepl you must put them in 
> > the syncrepl directive.
>    Please open an ITS for this.  I'll have to figure out how this was
> My goal for openldap with moznss support is that it will work exactly 
> like openldap with openssl worked - you should not even know (or care) 
> that a different crypto implementation is being used.  Since this is 
> not the case with this particular issue, I consider it a bug in the 
> moznss crypto implementation of openldap.

In fact I cannot guarantee that the current behaviour of openldap 
2.4.23, when linked to openssl, would be to use a brand new TLS context: 
indeed my working system uses openldap 2.4.21 linked to openssl.
I'll try to test on a Fedora 15 in which OpenLdap may be linked to openssl.

Thibault