On Sat, Sep 22, 2012 at 7:55 AM, Mik J <[email protected]> wrote: ... > I think so the problem is on the client side. When I use the command > line, I think that /etc/openldap/ldap.conf is used by ldapsearch and in that > file I have: > URI ldaps://myserver.mydomain.fr > TLS_CACERT /etc/openldap/ssl/CA.crt ... > The problem comes when I use a php script inside my chrooted Apache ... > - Where should I put some kind of TLS > CACERT so that the client side will consider my certificate valid ?
Since you have a working set up outside of the chroot, I would think the easiest thing would be to copy that set up into the chroot, with /etc/openldap/ldap.conf and /ec/openldap/ssl/CA.crt inside the chroot. Philip Guenther
