[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: ldap+ssl/tls

To: Francois Beretti <francois.beretti@enatel.com>
Subject: Re: ldap+ssl/tls
From: Tony Earnshaw <tonni@billy.demon.nl>
Date: 11 Mar 2003 15:59:17 +0100
Cc: Craig Jackson <craig.jackson@wild.net>, Liste OpenLDAP Software <openldap-software@OpenLDAP.org>
In-reply-to: <1047392754.800.64.camel@linux-integ>
Organization:
References: <1047390207.10975.17.camel@rhino.wild.net> <1047392754.800.64.camel@linux-integ>

tir, 2003-03-11 kl. 15:25 skrev Francois Beretti:

> did you create keys for ldap clients using openldap library (like
> evolution) ?

Evo is supposed to bind using a dn and vanilla ssl. It doesn't use
client certs.

Unfortunately, it doesn't work, either (<=1.2.2). Mozilla does, but
neither does Mozilla want client certs (needs a server cert, though, for
ssl binds).

Incidentally, all the negative stuff about ssl/tls and Evo only applies
to ldap. ssl/tls IMAP and SMTP work fine.

The best place to follow this up, is on the Evo mailing list.

Best,

Tony

-- 

Tony Earnshaw

And they allowed Apollonius to ask questions; and
he asked them of what they thought the cosmos was
composed; but they replied ...

e-post:		tonni@billy.demon.nl
www:		http://www.billy.demon.nl

Follow-Ups:
- Re: ldap+ssl/tls
  - From: Francois Beretti <francois.beretti@enatel.com>

References:
- ldap+ssl/tls
  - From: Craig Jackson <craig.jackson@wild.net>
- Re: ldap+ssl/tls
  - From: Francois Beretti <francois.beretti@enatel.com>

Prev by Date: Re: ACLs, groups, and regular expressions... oh my
Next by Date: Re: ldap+ssl/tls
Index(es):
- Chronological
- Thread