[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: AW: StartTLS is not working

To: openldap-technical@openldap.org
Subject: Re: AW: StartTLS is not working
From: "Dieter Kluenter" <dieter@dkluenter.de>
Date: Tue, 07 Oct 2008 22:34:14 +0200
In-reply-to: <971644.94555.qm@web54603.mail.re2.yahoo.com> (Dat Duong's message of "Tue, 7 Oct 2008 13:11:07 -0700 (PDT)")
References: <971644.94555.qm@web54603.mail.re2.yahoo.com>
User-agent: Gnus/5.1008 (Gnus v5.10.8) XEmacs/21.5-b28 (linux)

Dat Duong <datduong2000@yahoo.com> writes:

> Hi Hauke,
>
> I still can't get TLS to work. Here is the error message.
>
> TLS certificate verification: Error, self signed certificate
> tls_write: want=7, written=7
>   0000:  15 03 01 00 02 02 30                               ......0          
> TLS trace: SSL3 alert write:fatal:unknown CA
> TLS trace: SSL_connect:error in SSLv3 read server certificate B
> TLS trace: SSL_connect:error in SSLv3 read server certificate B
> TLS: can't connect: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed

Please describe the parameters to create your certificate chain.
I presume you have not signed your certificates with a known
certificate authority.

-Dieter

-- 
Dieter KlÃnter | Systemberatung
http://www.dpunkt.de/buecher/2104.html
GPG Key ID:8EF7B6C6
53Â08'09,95"N
10Â08'02,42"E

References:
- Re: AW: StartTLS is not working
  - From: Dat Duong <datduong2000@yahoo.com>

Prev by Date: Re: AW: StartTLS is not working
Next by Date: problem searching directory for a certificate
Index(es):
- Chronological
- Thread