Yes indeedie, sir. You were right about requiring the passphrase. If I summon slapd via the command "service ldap start", when the system responds "starting ldap:", I type in the passphrase, and off we go. With the command "slapd -u ldap -d 255", I'm prompted for the passphrase. Many thanks!
One more question, if I may: when I view the certificate in my browser, it shows that the cert. was issued to localhost.localdomain by localhost.localdomain. Of course, in ceating both the CA and the certificate, I plugged in my company-spcific information. I would expect to see this in the cert. Why am I not? How do I get my certificate to show? Now, if I can lick this ... Dimitri -----Original Message----- From: QM [mailto:[EMAIL PROTECTED] Sent: Tuesday, August 05, 2003 19:16 To: [EMAIL PROTECTED] Subject: Re: OpenLDAP w/ my certificate won't start : I'm having a problem getting openldap to work with SSL on RH 7.3. When I : use the dummy certificate that comes with 7.3 slapd starts fine; when I : create my own CA and certificate, it hangs. Does your new cert have a passphrase on the private key? slapd may not have hung, per se, but -- like other apps which support SSL certs -- it could be waiting for someone to input a passphrase for the cert's key. I don't know offhand whether OpenLDAP supports putting the passphrase in a config file, or passing it via stdin. Otherwise, you could fire up slapd with copious debug output and/or run strace to see where it's hanging. As root, run: slapd -u ldap -d 255 -QM -- www.brandxdev.net C++ / Java / SSL ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED] ______________________________________________________________________ OpenSSL Project http://www.openssl.org User Support Mailing List [EMAIL PROTECTED] Automated List Manager [EMAIL PROTECTED]