Hans Holt wrote:
Hi,
I'm new to Net::LDAP and want to use it to acess an OpenLDAP server that
accepts simple authentication over TLS. TLSVerifyClient is set to 'never' on
the server.
Using the openldap package ldapsearch establishes a tls connection and
searches the ldap directory as expected.
My simple perl script however fails with "TLS confidentiality required
error". The script is as follows:
#!/usr/bin/perl -w
use Net::LDAP;
$ldap = Net::LDAP->new( 'localhost' ) or die "$@";
$mesg = $ldap->start_tls( verify => 'none', );
You just need to tell start_tls() where the ca cert is:
$ldap->start_tls(capath => "/etc/openldap/cacerts/");
--
mike