Re: about TLS and Openldap ...

[Susanne Benkert <benkerts@emt.iis.fhg.de>]

Hi Johann,


Johann Botha wrote:


> a problem i had with getting ldaps running was that my SSL cert was not
> created with the correct hostname.
>
> when you create the SSL cert, make sure your forward,reverse lookups match
> the Common Name value you give:
>
> openssl req -new -x509 -nodes -out server.pem -keyout server.pem -days 0
>
> Common Name (eg, YOUR name) []: myserver.mydomain.com


I'm quite sure I did so, because had the same problem some time ago and 
nothing worked (not even start_tls) but after changing the CN start_TLS 
worked.

Thanks for your reply.
Susanne