Hi all, I need to connect to an LDAP server with a self-signed cert.
I cannot get s_client to verify OK..  I have gathered the server cert
by running s_client and then copying the server cert out of the output
from s_client.  Then I run s_client with the -CAfile option pointed to
that file and it still does not work.  I've even run strace to confirm
that the cert is in fact read.

Can one use a server's cert in this way?  If not, what do I need to do?

Just in case I've failed to be clear:

s_client -host hostname -port 636 > cert.pem
# edit cert.pem so it only contains the cert
s_client -host hostname -port 636 -CAfile ./cert.pem

No luck...

Thanks!
-Dylan
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           majord...@openssl.org

Reply via email to