Re: Solaris 8, TLS connect fails (ITS#1266)

[Kurt@OpenLDAP.org]

At 01:02 AM 8/1/2001, muecketb@sbox.tugraz.at wrote:
>Full_Name: Stocker Gernot
>Version: 2.0.11
>OS: Solaris 8
>URL: ftp://ftp.openldap.org/incoming/
>Submission from: (NULL) (129.27.41.7)
>
>
>Hello openldap developers,
>
>I compiled openldap 2.0.11 on Solaris 8 with tls support using openssl-0.9.6a. 
>
>The configuration was OK and ssl was found:
>./configure --disable-slapd --disable-slurpd  --enable-clients
>--without-cyrus-sasl --with-tls
>
>During compilation I got:
>
>gcc -g -O2 -I../../include -I../../include -c tls.c  -fPIC -DPIC -o
>.libs/tls.lo
>tls.c:534: warning: initialization from incompatible pointer type
>tls.c:536: warning: initialization from incompatible pointer type
>tls.c:538: warning: initialization from incompatible pointer type
>
>but compilation proceeded without problems.
>
>All programs compiled fine and my own developed under Linux, too. 
>
>BUG1:
>While testing the tls ability against a Novell Netware 5 Ldap-Server(Ldapv3 and
>SSLv3only), 
>I noticed under _Linux_ that only uri-connects (with ldaps://ldaphost) get a 
>positiv result(tested with ldapsearch as well as with my own program).
>
>[ that means: ldap_start_tls_s( ld, NULL, NULL ) doesn't work! 
>  but (ldap_initialize(&ld ,"ldaps://ldaphost") ]

Ask Novell to implement RFC 2830.



>BUG2:
>Under _Solaris_ neither with ldapsearch nor with my own program there was an 
>ldaps:// connect possible. The same call with ldap://ldaphost proceeded 
>without problems.

Sounds like a certificate problem...  see openldap-software
archives for discussions of common problems here.