Re: TLS Configuration - "unable to get TLS client DN, error=49"

[Brad T Waldorf <bwaldorf@us.ibm.com>]

Thanks Quanah.  To answer your points,

(a)  We've got a release coming up shortly... We committed to version
2.4.6, and unfortunately don't have enough time to switch and re-test with
2.4.11 at this time -- although our plan is to upgrade for our future
releases.  We know not to expect much from mirrormode/multimaster in 2.4.6
(buggy)... and now seems like we should consider TLS part of that bucket
too?

(b)  We compiled it against OpenSSL.  Was that ok?


Thanks again!








>>--On Friday, August 01, 2008 4:14 PM -0400 Brad T Waldorf
>><bwaldorf@us.ibm.com> wrote:

>> Hi.  We're trying to configure a basic SSL (TLS) connection through
>> OpenLDAP version 2.4.6.  We're using Linux, Debian Version 4.0 ('etch')
>> INTEL.


>(a) Get the latest release (2.4.11).  2.4.6 was the very first OL 2.4
>release, and numerous problems have since been fixed.

>(b) What SSL implementation did you compile it against?  OpenSSL or
GnuTLS?

>--Quanah