Just confirmed, changing the ldap server's cipher suite to the one that works in testing with gnutls-cli gets syncrepl going. I've attached the ldif file I used to fix ldap, I needed to restart slapd afterwards. Use the following command to apply, as root, on the server:
ldapmodify -Q -Y EXTERNAL -H ldapi:/// -f fixtls.ldif Of course dont blindly apply. ** Attachment added: "LDIF to change olcTLSCipherSuite" https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1537762/+attachment/4625309/+files/fixtls.ldif -- You received this bug notification because you are a member of Ubuntu Bugs, which is subscribed to Ubuntu. https://bugs.launchpad.net/bugs/1537762 Title: syncrepl does not work when using tls To manage notifications about this bug go to: https://bugs.launchpad.net/ubuntu/+source/openldap/+bug/1537762/+subscriptions -- ubuntu-bugs mailing list [email protected] https://lists.ubuntu.com/mailman/listinfo/ubuntu-bugs
