Re: Issues with OpenLdap using OpenTLS

To: openldap-technical@openldap.org
Subject: Re: Issues with OpenLdap using OpenTLS
From: Christopher Paul <chris.paul@rexconsulting.net>
Date: Thu, 2 Jan 2020 16:17:11 -0800
Content-language: en-US
Dkim-filter: OpenDKIM Filter v2.10.3 zrex1.rexconsulting.net 666CF6E23A4
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=rexconsulting.net; s=2447EE78-3167-11E8-AC3D-677DCD1D4027; t=1578010632; bh=B2OCOPOpScphEGTTyLo8Lp21uclmuTAgHv1fcV9h0AY=; h=To:From:Message-ID:Date:MIME-Version; b=qhMFMtI8GOkNK4mB9y3YG+OGpPmpDK9jo2T69Znev4dXFzIetzBgDR33nwLGVowgW LDv4LR7XIJwaEgB9MDjRrw+ynvnWhTGXvhDfRpvnEYAb5evzk4s9PcA5oSuPWnB6ap fZqn/wzy0v6IR4h4nhhxvXxYOIOnUwh1HgrxHzduKhY+DIpzKoxsIA32GNevt1XZrf GOhqlqWm78LrXUANwxob78tI2J7WXr5V9xCmM0uRfEg/B8TdHcWyRSQ/zcwOWewuTB nGXvPT+JlqWa/rLBUvb8KRF76NL0ivZgGCFNCucB7s/0PYy78IFLPsNTyOA5IOQuHq p5yRUD9G/KTtA==
In-reply-to: <MN2PR07MB7199CDAD77EE29AB8676AC58F2200@MN2PR07MB7199.namprd07.prod.outlook.com>
References: <MN2PR07MB7199CDAD77EE29AB8676AC58F2200@MN2PR07MB7199.namprd07.prod.outlook.com>
User-agent: Mozilla/5.0 (Macintosh; Intel Mac OS X 10.15; rv:68.0) Gecko/20100101 Thunderbird/68.3.0

On 1/2/20 8:36 AM, Dunne, Kenneth wrote:

All

I am able to connect to my home-built OpenSSL installation (from Dec-19 sources) on CentOS-7 without the TLS bind

[...]

TLS trace: SSL_connect:SSLv2/v3 write client hello A

tls_read: want=7, got=0

Hey Ken, is port 636 open on the host-based firewall if it's running? any other firewalls blocking 636?

Follow-Ups:
- RE: Issues with OpenLdap using OpenTLS
  - From: "Dunne, Kenneth" <kenneth.dunne@siemens.com>

References:
- Issues with OpenLdap using OpenTLS
  - From: "Dunne, Kenneth" <kenneth.dunne@siemens.com>