[Date Prev][Date Next] [Chronological] [Thread] [Top]

RE: SSL/TLS issue



Yes, I double checked ldap.conf  and its pointing to cacert.pem directive.

BASE    dc=curry,dc=edu
URI     ldaps://ldap-ssl.curry.edu
TLS_REQCERT allow
#URI    ldap://ldap.example.com ldap://ldap-master.example.com:666
TLS_CACERTDIR /opt/local/etc/openldap/cacert.pem

Thanks



-----Original Message-----
From: Aaron Richton [mailto:richton@nbcs.rutgers.edu] 
Sent: Monday, October 15, 2012 11:45 AM
To: Darouichi, Aziz
Cc: openldap-technical@openldap.org
Subject: Re: SSL/TLS issue

On Mon, 15 Oct 2012, Darouichi, Aziz wrote:

> TLS trace: SSL3 alert write:fatal:unknown CA

Did you (try to) configure the CA on your client (i.e. in ldap.conf or 
similar)? For example, a "TLS_CACERT" or "TLS_CACERTDIR" directive that 
points to the appropriate CA certificate. See also ldap.conf(5) man page.