I've just run into this issue. Running the test with gnutls-cli with only SECURE256, we see the same issue, but our certs do have a good signing algorithm, "Signature Algorithm: sha256WithRSAEncryption".
What's weird to me, and maybe I dont understand just how significant the order of the cipher suite is, but before this issue, we've configured ldap with the following cipher suite list: SECURE128:SECURE256:-VERS-SSL3.0:-VERS-TLS-ALL:+VERS-TLS1.2:+VERS-TLS1.1 That list fails with gnutls-cli, but if I change the list to the following, it works: SECURE256:SECURE128:-VERS-SSL3.0:-VERS-TLS-ALL:+VERS-TLS1.2:+VERS-TLS1.1 -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1537762 Title: syncrepl does not work when using tls To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1537762/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
