[Bug 257153] Re: "TLS: peer cert untrusted or revoked (0x82)" error in Hardy's version of ldap-utils

2008-08-29 Thread Gary Wilson
Perhaps because gnutls openldap doesn't seem to support the TLS_CACERTDIR option (bug #242313)? -- "TLS: peer cert untrusted or revoked (0x82)" error in Hardy's version of ldap-utils https://bugs.launchpad.net/bugs/257153 You received this bug notification because you are a member of Ubuntu Serv

[Bug 257153] Re: "TLS: peer cert untrusted or revoked (0x82)" error in Hardy's version of ldap-utils

2008-08-29 Thread Gary Wilson
Thanks, for the info. Putting the missing cert in /etc/ssl/certs/ca- certificates.crt and adding: TLS_CACERT /etc/ssl/certs/ca-certificates.crt ...to my ldap.conf fixed the connection problem for me. Any idea as to why my setup was working in Gutsy? Previously, I only had: TLS_CACERTDIR /usr/

[Bug 257153] Re: "TLS: peer cert untrusted or revoked (0x82)" error in Hardy's version of ldap-utils

2008-08-26 Thread Gary Wilson
I am seeing this same issue. Let me know if there is any information I can provide that would be helpful, but my output is basically the same as what Karl has already posted. And for those interested, you can work around the issue with the following option in ldap.conf: TLS_REQCERT allow ...how

[Bug 242313] Re: TLS_CACERTDIR not supported in gnutls

2008-08-26 Thread Gary Wilson
I can confirm the "cacertdir not implemented for gnutls" warning message. The same setup that worked for me on Gutsy no longer works on Hardy. I had only added the following option to my /etc/ldap/ldap.conf file: TLS_CACERTDIR /usr/share/ca-certificates/mozilla However, while this ticket might