--On Friday, August 24, 2007 6:13 PM -0400 Chuck Keagle
<[EMAIL PROTECTED]> wrote:
Here are the current TLS settings in the indicated files (I took out some
comments to make reading easier):
# grep -i tls /etc/ldap.conf /etc/openldap/ldap.conf
/etc/ldap.conf:tls_cacertdir /etc/openldap/cacerts
/etc/openldap/ldap.conf:TLS_CACERTDIR /etc/openldap/cacerts
To use the tls_cacertdir bits, you must create the x509 hash of the CA cert
in /etc/openldap/cacerts directory.
Something like the following:
ln -f -s ca.pem /etc/openldap/cacerts/`openssl x509 -hash -noout -in
/etc/openldap/ca.pem`.0
That's an interesting error, which I've never seen before. Can you print
out the text information of the cert the ldap server is using?
Any general user can see certificate /etc/openldap/cacerts/CA.pem.
I figured you weren't asking for the cert it is using.
I tried using openssl ca to get key ifno.
openssl x509 -text -in <cert>
For example:
openssl x509 -text -in ca.pem
More sleuthing info would be very helpful here.
Thank you, Quanah for helping me gain knowledge and insight here.
np. :)
--Quanah
--
Quanah Gibson-Mount
Principal Software Engineer
Zimbra, Inc
--------------------
Zimbra :: the leader in open source messaging and collaboration
---
You are currently subscribed to [EMAIL PROTECTED] as: [EMAIL PROTECTED]
To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the
SUBJECT of the message.
