Re: Certificate checking on LDAP over SSL connection

2008-12-09 Thread Michael Ströder
Alberto Lopes wrote: > > From what I understood from the LDAPUserFolder code, it delegates the > SSL negotiation to the python-ldap library. And further down the delegation path: python-ldap -> OpenLDAP lib -> OpenSSL lib > How can I pass the > CAcertificate to the python-ldap layer in order to

Certificate checking on LDAP over SSL connection

2008-12-09 Thread Alberto Lopes
Dear friends, I am using python-ldap indirectly, as a dependency for the LDAPUserFolder product for Zope. >From what I understood from the LDAPUserFolder code, it delegates the SSL negotiation to the python-ldap library. The problem is that when I try to make an LDAP connection over SSL (to a MS-

Re: Certificate checking on LDAP over SSL connection

2008-12-09 Thread Alberto Lopes
Dear Michael, Thank you for your answer. Now, I'm working on making the zope python interpreter to be able to connect to the LDAP server (over SSL), using the example in Demo/initizalize.py. However I got stuck in a different problem. When trying to connect, I followed this sequence of commands

Re: Certificate checking on LDAP over SSL connection

2008-12-09 Thread Michael Ströder
Alberto Lopes wrote: > ldap.set_option(ldap.OPT_X_TLS_CACERTFILE,'/path/to/my/CAcert') > l = > ldap.initialize('ldaps://:',trace_level=ldapmodule_trace_level,trace_file=ldapmodule_trace_file) > > l.protocol_version=ldap.VERSION3 > l.bind_s('','',ldap.AUTH_SIMPLE) > > Here, I got the following m

Re: Certificate checking on LDAP over SSL connection

2008-12-09 Thread Alberto Lopes
Michael, Here is what I got after the openssl s_client -connect : -CAfile /path/to/my/CAcert command: CONNECTED(0784) --- Certificate chain 0 s: i:/DC=srf/CN=AC DN --- Server certificate -BEGIN CERTIFICATE- MIIFjjCCBHagAwIBAgIKb11m+wACNzANBgkqhkiG9w0BAQUFADAzMRMwEQYK CZImiZPy