[Date Prev][Date Next]
Re: Syncrepl can't start ssl session because of refused 'client' certificate
Le 12/07/2011 04:34, Rich Megginson a écrit :
working in openssl.
Sounds to me like there's no bug here and the ITS report is invalid.
If you want separate TLS settings for syncrepl you must put them in
the syncrepl directive.
Please open an ITS for this. I'll have to figure out how this was
My goal for openldap with moznss support is that it will work exactly
like openldap with openssl worked - you should not even know (or care)
that a different crypto implementation is being used. Since this is
not the case with this particular issue, I consider it a bug in the
moznss crypto implementation of openldap.
In fact I cannot guarantee that the current behaviour of openldap
2.4.23, when linked to openssl, would be to use a brand new TLS context:
indeed my working system uses openldap 2.4.21 linked to openssl.
I'll try to test on a Fedora 15 in which OpenLdap may be linked to openssl.