Re: (ITS#9014) OpenLDAP modifies user provided TLS certificate before sending it to client

[hyc@symas.com]

siddjain@live.com wrote:
> Full_Name: SIDDHARTH JAIN
> Version: 2.4.45
> OS: Linux
> URL: ftp://ftp.openldap.org/incoming/
> Submission from: (NULL) (173.226.196.10)
> 
> 
> In some cases, OpenLDAP will modify the TLS certificate given to it before
> sending it over to the client resulting in a certificate signature error. An
> example of certificate it modifies is given below:

OpenLDAP never touches the certificates you configure. If you're getting a corrupted
certificate then there's either a bug in your storage/filesystem or in your SSL/TLS library.

-- 
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/