[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: about TLS and Openldap ...

Hi Johann,

Johann Botha wrote:

a problem i had with getting ldaps running was that my SSL cert was not
created with the correct hostname.

when you create the SSL cert, make sure your forward,reverse lookups match
the Common Name value you give:

openssl req -new -x509 -nodes -out server.pem -keyout server.pem -days 0

Common Name (eg, YOUR name) []: myserver.mydomain.com

I'm quite sure I did so, because had the same problem some time ago and nothing worked (not even start_tls) but after changing the CN start_TLS worked.

Thanks for your reply.