> --- "Kurt D. Zeilenga" <[EMAIL PROTECTED]> wrote:
> > In your slapd.conf(5) configuration file, it
> appears
> > that some lines contain inappropriate leading
> > whitespace.
> > Please note that leading white space is
> significant
> > in slapd.conf(5). They indicate the line is a
> > continuat
Hi,
Any idea please?
cheers
--- fatima riadi <[EMAIL PROTECTED]> a écrit :
> Hello all,
>
> Here are my configuration files (I deleted
> comments).
> You would have any remarq, please let me know.
>
>
:SSL
routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake
failure
ldap_sasl_interactive_bind_s: Can't contact LDAP
server (81)
additional info: error:14077410:SSL
routines:SSL23_GET_SERVER_HELLO:sslv3 alert handshake
failure
I really would like to have any help.
Thanks.
nssl genrsa") even for the CA's key and
for my ldaps server's public key.
>
> -Original Message-
> From: [EMAIL PROTECTED]
> [mailto:[EMAIL PROTECTED] On
> Behalf Of fatima riadi
> Sent: Thursday, March 24, 2005 12:17 AM
> To: Fran?ois Beretti
>
==
I didn't set any TLSCipherSuite into the slapd.conf
file. I also didn't set any value to the tls_ciphers
into the /etc/ldap.conf file.
I would appriciate any suggestion.
Thanks for you all.
--- fatima riadi <[EMAIL PROTECTED]> wrote:
> H
Hi all,
--- "Kurt D. Zeilenga" <[EMAIL PROTECTED]> wrote:
> Have you gotten s_client to work with s_server? If
> not,
> there is no reason to expect OpenLDAP Software to
> work.
I've gotten s_client to work with s_server.
Here is a sample of my s_server debug output:
Using default temp DH pa
; on Wed, 23 Mar 2005 15:34:29 +0100 (CET), fatima
> riadi <[EMAIL PROTECTED]> said:
>
> ftmriadi> Once checking the SSL conection (by
> running the
> ftmriadi> command: 'openssl s_client -connect
> localhost:636
> ftmriadi> -showcerts -state -CAfile
>
Hello there,
I am trying to secure connections to my ldap server by
using TLS.
I created a certificate for my server. The certicate
verification was OK (openssl verify -CAfile
/path/to/ca.pem /path/to/my_ldap_srv_certificate).
On my slapd.conf file I set TLSCACertificateFile,
TLSCertificate and TL