Re: SSL/TLS authentication

[Abdul Basit <abasit@basit.cc>]

Hello Turbo Fred.

   Thanks for replying, I did change it to FQDN,
and now the slapd reports unknown CA in the certifcate
A being read from client, can anyone give a tip?

thanks a lot
basit


On Tue, 1 Mar 2005, Turbo Fredriksson wrote:

> Quoting Abdul Basit <abasit@basit.cc>:
>
> >   I am trying to authenticate against an ldap server using
> > SSL using certificates, but call to ldap_bind is failing.
> > can anyone please tell me what is wrong? below is the code.
> >
> >      url.lud_host = "192.168.51.214";
>
> Don't you have to use the FQDN (fully qualified domain name) for SSL/TLS
> to work!? Try...
>
> >      ldapuri = ldap_url_desc2str( &url );
>
> Don't know about this, but I'd set ldapuri to
>
> ldaps://ldapserver.domain.tld
>
> And not use 'url'... Works fine for me...