Digambar Sawant writes: > Is there any way to fetch the CA certificate from LDAP server using OpenLDAP > C SDK? (...) > On client side, how do I get the ca certficate? I don't want to copy it > manually by doing scp/http.
If you get it from the server, someone can hijack the connection and gives you their own certificate instead of your server's. That defeats the entire point of having a server certificate: to verify that the machine you connected to actually is the one you wanted to reach. But if you insist, check out your TLS/SSL implementation's documentation. I OpenLDAP leaves it to do CA cert handling. -- Hallvard
