Re: 6.8 openldap and SSL/TLS problem after upgrade

2020-12-23 Thread Kapetanakis Giannis
On 23/12/2020 03:53, Stuart Henderson wrote: On 2020-12-22, Kapetanakis Giannis wrote: Hi, After upgrading to 6.8-release I can no longer connect to my ldap server with openldap and SSL/TLS. I'm using a self signed root CA to sign LDAP server's certificate. /etc/openldap/ldap.conf has: TLS_C

Re: 6.8 openldap and SSL/TLS problem after upgrade

2020-12-22 Thread Stuart Henderson
On 2020-12-22, Kapetanakis Giannis wrote: > Hi, > > After upgrading to 6.8-release I can no longer connect to my ldap server with > openldap and SSL/TLS. > I'm using a self signed root CA to sign LDAP server's certificate. > > /etc/openldap/ldap.conf has: > TLS_CACERTDIR /etc/openldap/cacerts > T

Re: 6.8 openldap and SSL/TLS problem after upgrade

2020-12-22 Thread Kapetanakis Giannis
I'm replying in misc@ since it affects other people as well. For freeradius (freeradius-2.2.10p1) and ldap communication I had to also set require_cert = "allow" It didn't respect the setting of /etc/openldap/ldap.conf Maybe it's now linked against local ldap library and not openldap's ? G O