[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: SSL/TLS testing

To: Jayavant Patil <jayavant.patil82@gmail.com>
Subject: Re: SSL/TLS testing
From: mark cunningham <markcunninghamemail@gmail.com>
Date: Mon, 12 Dec 2011 11:21:17 +0000
Cc: "openldap-technical@openldap.org" <openldap-technical@openldap.org>
Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=gamma; h=references:from:in-reply-to:mime-version:date:message-id:subject:to :cc:content-type; bh=uuEW4adP+IVtcmEsHsFal/+uXwI77lWgTDz3xpvRQvA=; b=GiOMr/IhxBeUFcxL9g4/0uVbWAPtgnJBEvgNyFtMhtc0W66gqRQ/FgsvaomPIL2kbH rM3jRBqNMmrggRaU+KSku2a6da3Mdvu8pgzAc/OzaRv3JYhoD1TLFE+KwOu+KPfihd1q mgr6T2/I8lIUJfPYyMgpXs8KMCuUm4DcYwG5c=
In-reply-to: <CAPDKCfdQKn+_2KQX37wCixfX+GA+q6eAEHsZkgWXGQDBzMvC1Q@mail.gmail.com>
References: <CAPDKCfdQKn+_2KQX37wCixfX+GA+q6eAEHsZkgWXGQDBzMvC1Q@mail.gmail.com>

To run with tls or die, ldapsearch -ZZ (man ldapsearch for explanation)
You could make the server require clients use tls and finally run
tcpdump / wireshark with and without tls and see if you can see
results in plaintext

Mark



On 12 Dec 2011, at 10:40 a.m., Jayavant Patil
<jayavant.patil82@gmail.com> wrote:

> Hi,
>
>   I am using openldap-2.4.19-4.x86_64 on fedora 12 machine. I have enabled openldap SSL/TLS. How do I know (test) that I am using SSL/TLS connections instead of normal ldap:///?
>
> --
>
> Thanks & Regards,
> Jayavant Ningoji Patil
> Engineer: System Software
> Computational Research Laboratories Ltd.
> Pune-411 004.
> Maharashtra, India.
> +91 9923536030.
>

References:
- SSL/TLS testing
  - From: Jayavant Patil <jayavant.patil82@gmail.com>

Prev by Date: French tutorial
Next by Date: Re: SSL/TLS testing
Index(es):
- Chronological
- Thread