Hi,

I already fixed the problem by reading this thread
http://www.mail-archive.com/[email protected]/msg00266.html

At the end, i had to change the TLSCipherSuite line in
my /etc/openldap/slapd.conf of 
TLSCipherSuite TLS_RSA_AES_256_CBC_SHA1 
by 
TLSCipherSuite TLS_RSA_AES_128_CBC_SHA1

Thank you anyway.



On Wed, 2010-08-18 at 14:14 +0200, Joel Rosental R. wrote:
> On Tue, 2010-08-17 at 17:53 -0400, Marvin Addison wrote:
> >   It's common for servers to require
> > SSLv3/TLSv1, but I believe it's also common to support the v2
> > client/server hello messages; that's to say it's doubtful that's the
> > problem.  But it's very odd that the client closes the connection
> > after the client hello is written.  Also note the client is requesting
> > a TLSv1 exchange, so you might also confirm your server software
> > supports that protocol. 
> 
> I'm using openldap package that comes with Debian Lenny (2.4.11-1
> +lenny2). I have several machines where users perform ldap
> authentication using ssl (ldaps) against the ldap server without
> problem, and here i'm importing the same certificate that ldap server
> has (ldapcert.pem) along with the its CA root certificate, so in theory
> it should accept it right? since it's the same.
> 
> It seems to me that isn't the client who is closing the connection but
> the LDAP server since the error says:
> 
> >  http-8443-1, received EOFException: error
> > http-8443-1, handling exception: javax.net.ssl.SSLHandshakeException:
> Remote host closed connection during handshake
> 
> 

Attachment: signature.asc
Description: This is a digitally signed message part

Reply via email to