Re: Problems with openldap2.1.4 and TLS/SSL

[Rick van Rein <rick@vanrein.org>]

Hoi Frank Swasey,

> > i've create the certificate with the following arguments
> > openssl req -new -x509 -nodes -out server.pem -keyout server.pem -days 365
> 
> Aha!  You generated a self-signed certificate.  That doesn't work with
> OpenLDAP 2.1!  You have to have a real certificate (something certified by a
> CA).

Either that, or you should mention this cert as a CA-cert itself.
At least, that's what you can do with Apache, I bet this is the same.

-Rick