Re: TLS Configuration

[Howard Chu <hyc@symas.com>]

Hydro Tium wrote:
> Hi guys,
>
> I'm struggling to configure my OpenLDAP with TLS (openssl) without
> success.  I'm receiving the following error:
>
> $ sudo slapd -d 3
> ...
> TLS: gcry_control GCRYCTL_SET_RNDEGD_SOCKET failed
> 5475ca9c main: TLS init failed: -1

gcry implies that you're using gcrypt/GnuTLS, not OpenSSL.

> My configuration is the following:
> dn: cn=config
> objectClass: olcGlobal
> cn: config
> olcPidFile: /var/run/slapd/slapd.pid
> olcArgsFile: /var/run/slapd/slapd.args
> olcIdleTimeout: 7
> olcLogLevel: conns filter stats none
> olcReferral: ldap://root.openldap.org <http://root.openldap.org>
> olcTLSCACertificateFile: /etc/ssl/certs/My_Root_CA.pem
> olcTLSCertificateFile: /etc/ssl/certs/My_Root_CA.pem
> olcTLSCertificateKeyFile: /etc/ldap/server.key.pem
> olcTLSVerifyClient: demand
> olcTLSRandFile: /dev/urandom
>
>
> Any clues on how to solve this one?

Haven't the foggiest. gcrypt is long obsolete/deprecated.

--
  -- Howard Chu
  CTO, Symas Corp.           http://www.symas.com
  Director, Highland Sun     http://highlandsun.com/hyc/
  Chief Architect, OpenLDAP  http://www.openldap.org/project/