Re: Slapd TLS issue

To: Terje Trane <terjet@funcom.com>

Subject: Re: Slapd TLS issue

From: Eric Falbe <ericf706@gmail.com>

Date: Thu, 6 Mar 2014 19:03:33 -0600

Dkim-signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20120113; h=mime-version:in-reply-to:references:date:message-id:subject:from:to :cc:content-type; bh=d+wgt4iOfDysepaWfePNqOo7NppH6JVjca9+Juu3nSs=; b=gmIRr0y6eawjGak6UVxanCnZHxdjjC0DrWw8KXUcPxrshY1LKDEi+nh5Ql1Fy0EZUc kYX1w8pMoiY+2wslNBR89s0Bz2r7WtLxkyLob88Bg8dRsG/9XnAUiiXlZF46aXvPdhOs XpNwC6s0Q7DlgLl4ucI3ZpDMc+oBNgrdVTqN/aFx31pOhQPArXh6oyjqcYgRsfJu708U Bp5dceL+qG0uZd20295blehHkv5X37M65oblqi2JCHMgilrvt7fMAfTQ/U1GmGNoD+mX Z/usrwng4wKJ2J1VIZEHb2XCJV80y+0FKBfOiLn3bSg584GV0Urn8KgiKMg7nsILWihv CtJg==

In-reply-to: <531904BE.7080208@funcom.com>

References: <CABm5hZ8+pYonrKMHyvqFQ-hSi1mTm7wZOiyqQBODOfy4e8W1wA@mail.gmail.com> <531904BE.7080208@funcom.com>

Yes, the openldap rpm was just updated, but it did not take effect until the slapd deamon was restarted. I have not explicitly tried to use the Mozilla NSS database, I did not use the TLSCADIR(?) attribute and instead used:

olcTLSCertificateFile , olcTLSCertificateKeyFile, and olcTLSCACertificateFile.

I will look into that bug and the documentation you pointed me at.

Thanks

Eric Falbe

On Thu, Mar 6, 2014 at 5:29 PM, Terje Trane <terjet@funcom.com> wrote:

On 05.03.2014 22:27, Eric Falbe wrote:

I have attempted to rebuild the database backend (with slapcat and slapadd), but am still getting this same error. I have my ssl (self-signed) certificates located in /etc/pki/tls/certs/ldap.cassens.com.pem /etc/pki/tls/tls/certa/ca.pem /etc/pki/tls/private/ldap.cassens.comKey.pem

These certificates worked fine up untill today, does anyone have any insight on where to look to being troubleshooting this issue?

Just a guess, but was the openldap rpm just updated? (or the service just restarted for the first time after a previous update).

Could this be related to RedHat/CentOS rpms deciding to start using GnuTLS instead of OpenSSL? Try searching in their bug databases.

E.g.: https://bugzilla.redhat.com/show_bug.cgi?id=707599

---
This email is free from viruses and malware because avast! Antivirus protection is active.
http://www.avast.com

Follow-Ups:

Re: Slapd TLS issue
- From: Howard Chu <hyc@symas.com>

References:

Slapd TLS issue
- From: Eric Falbe <ericf706@gmail.com>
Re: Slapd TLS issue
- From: Terje Trane <terjet@funcom.com>