[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: Problems with TLS on OpenBSD

"Heiner Ohm" <ho@risks.de> writes:

> Hello,
> i have a big problem with OpenLDAP 2.2.15 and TLS. I compiled it on a OpenBSD
> 3.5 machine with
> Everything works, TLS...
> I created a self-signed certificate (which works fine with other software),
> an added the lines
> TLSCertificateFile /etc/openldap/server.pem
> TLSCertificateKeyFile /etc/openldap/server.pem
> TLSVerifyClient never
> in my slapd.conf. The slapd starts without Problems and works fine with
> non-ssl connections but when i try to use TLS the following debug message
> appears (slapd -u slapd -g slapd -d 256):
> conn=1 fd=15 ACCEPT from IP= (IP=
> TLS: can't accept.
> TLS: error:14094418:SSL routines:SSL3_READ_BYTES:tlsv1 alert unknown ca
> /usr/src/lib/libssl/ssl/../src/ssl/s3_pkt.c:1052
> conn=1 fd=15 closed
> Does anyone know where my failure is?

Your client seems not be able to verify the certificate, thus unknown
ca. For more information: 

Dieter Klünter | Systemberatung
Tel: +49.40.64861967
Fax: +49.40.64891521
Key ID: 9B13A25650EF4335