John Carter wrote:
Hi,

Currently the s_client command supports starttls for smtp, ftp etc.
We're wanting to do the same for ldap, something like:

openssl s_client -connect 1.2.3.4:389 -starttls ldap

We're willing to pay (around 200 USD) to have this feature added.

Anyone interested?

Just what do you expect s_client to be able to do once it's gotten this far? The s_client code only speaks plaintext; LDAP is ASN.1. You're not going to be able to type anything intelligible into s_client once it's done.

And aside from that, the OpenLDAP libraries and tools already support 
StartTLS...
--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
Development Mailing List                       [email protected]
Automated List Manager                           [email protected]

Reply via email to