[Date Prev][Date Next] [Chronological] [Thread] [Top]

Problems with TLS on OpenBSD


i have a big problem with OpenLDAP 2.2.15 and TLS. I compiled it on a OpenBSD
3.5 machine with

> CPPFLAGS=-I/usr/local/include/db4/ LDFLAGS=-L/usr/local/lib/db4
./configure --prefix=/usr --bindir=/usr/bin --sbindir=/usr/sbin
--libexecdir=/usr/libexec --datadir=/usr/share --sysconfdir=/etc
--localstatedir=/var --libdir=/usr/lib --includedir=/usr/include
--enable-syslog --enable-ipv6 --with-tls --enable-slapd --enable-bdb
> make depend
> make
> make install

Everything works, TLS...

I created a self-signed certificate (which works fine with other software),
an added the lines

TLSCertificateFile /etc/openldap/server.pem
TLSCertificateKeyFile /etc/openldap/server.pem
TLSVerifyClient never

in my slapd.conf. The slapd starts without Problems and works fine with
non-ssl connections but when i try to use TLS the following debug message
appears (slapd -u slapd -g slapd -d 256):

conn=1 fd=15 ACCEPT from IP= (IP=
TLS: can't accept.
TLS: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca
conn=1 fd=15 closed

Does anyone know where my failure is?


Heiner Ohm