RE: default behavior of server certificate validation

To: "openldap-technical@openldap.org" <openldap-technical@openldap.org>

Subject: RE: default behavior of server certificate validation

From: Bin Lu <blu@paloaltonetworks.com>

Date: Thu, 19 Mar 2015 01:02:24 +0000

Accept-language: en-US

Content-language: en-US

In-reply-to: <841A051D8BD4144AA7B5AC63D97F9F051799CCCA@sjccmbxpw01p.paloaltonetworks.local>

References: <841A051D8BD4144AA7B5AC63D97F9F051799CCCA@sjccmbxpw01p.paloaltonetworks.local>

Thread-index: AdBh3Z9kCSOVHxv4RSeKK+gvgpuCngAAnytw

Thread-topic: default behavior of server certificate validation

Every time when connect to an ldaps url, it generates a fatal error due to “unknown CA”. Is it possible to disable this check?

Thanks,

-binlu

From: openldap-technical [mailto:openldap-technical-bounces@openldap.org] On Behalf Of Bin Lu
Sent: Wednesday, March 18, 2015 5:45 PM
To: openldap-technical@openldap.org
Subject: default behavior of server certificate validation

Hi,

In connecting the LDAP server with LDAPs or (start)TLS, what is the default behavior of the server certificate validation? How can I disable the default behavior?

Thanks,

-binlu