[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Openldap server with TLS not working

To: openldap-technical@openldap.org
Subject: Re: Openldap server with TLS not working
From: btb <btb@bitrate.net>
Date: Wed, 02 Oct 2013 08:57:11 -0400
Dkim-signature: v=1; a=rsa-sha256; c=simple/simple; d=bitrate.net; s=default; t=1380717415; bh=RsF/5x+UC1AkKyENHULlt7z2fvTWzX32VavZC/kwkhY=; h=Date:From:To:Subject:References:In-Reply-To; b=U/4vUlM4rEeuk+8QWhVGyaXI9rS0XLScIb3wlNXIqNjwtJ/yFttProUoYjlgRKXQA 0ebrhy49OyCAG6HN5ZiIe57yXQvIisGrHhvB5jAbqw+Ng47mHtWPTXr46/JErVSJbs tKFVQxx1n3m+Tqx5sfFqdO8IUC07Go70WQ9DdaO4=
In-reply-to: <E8C66D7B548D594AA2D874080BF5BB222D70F0F5@WPTXMAIL1.ptx.axway.int>
References: <E8C66D7B548D594AA2D874080BF5BB222D70F0F5@WPTXMAIL1.ptx.axway.int>
User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.8; rv:17.0) Gecko/20130801 Thunderbird/17.0.8

On 2013.10.02 07.29, Axel Grosse wrote:

when I test on the server itself ..
openssl s_client -connect 192.168.30.169:389 -showcerts -CAfile ./ssl/VordelCA.crt
CONNECTED(00000003)
710:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:188:

ldaps [port 636] is deprecated. use starttls with the standard port[389]. to test, just use ldapsearch [see the reference to -Z in the manpage]


-ben

Follow-Ups:
- Re: Openldap server with TLS not working
  - From: Michael Ströder <michael@stroeder.com>
- RE: Openldap server with TLS not working
  - From: Axel Grosse <agrosse@axway.com>

References:
- Openldap server with TLS not working
  - From: Axel Grosse <agrosse@axway.com>

Prev by Date: Re: Migrating to new production servers via syncrepl
Next by Date: sasl/plain with hashed password not working
Index(es):
- Chronological
- Thread