Fran Fabrizio wrote:
 > # openssl verify -CAfile /etc/openldap/cacerts/cacert.pem -purpose
 > sslserver /var/lib/ldap/servercrt.pem

Yep, sure did, it verified ok.  (See original email for the output)

In the original email, you had:

# openssl verify -CAfile /var/lib/ldap/cacert.pem -purpose sslserver /var/lib/ldap/servercrt.pem
/var/lib/ldap/servercrt.pem: OK

but this is testing against the server side CA cert. Do you see the difference in my command (CAfile argument)? Still, sounds like you may have done this too. In that case, undoubtedly Howard has a better idea what's going wrong.

Jon Roberts
www.mentata.com

---
You are currently subscribed to [email protected] as: [EMAIL PROTECTED]
To unsubscribe send email to [EMAIL PROTECTED] with the word UNSUBSCRIBE as the 
SUBJECT of the message.

Reply via email to