Re: Regarding OpenLDAP Access From Apache

[Asimananda Mohanty <asimananda.mohanty@xxxxxxxxx>]

I can see client hello, server hello, certificate from server, server hello done, encrypted handshake messages on my packet sniffer.

Well, I can see some checksum error in the server hello, certificate, encrypted handshake messages.

For all the above messages, port 636 on my ldap server has been used.

Regards

Asimananda

On Mon, Sep 21, 2009 at 5:32 PM, Peter Schober <peter.schober@xxxxxxxxxxxx> wrote:

* André Warnier <aw@xxxxxxxxxx> [2009-09-21 13:51]:

> If "ldaps" means "secure LDAP" (as in SSL), then all packets would
> be encrypted, and your protocol analyser may just not be able to
> detect them.

Well, at least a TCP connect to (default) port 636 should be in the
trace (not that I'm saying there is) or in the slapd logs.
-peter

---------------------------------------------------------------------
The official User-To-User support forum of the Apache HTTP Server Project.
See <URL:http://httpd.apache.org/userslist.html> for more info.
To unsubscribe, e-mail: users-unsubscribe@xxxxxxxxxxxxxxxx
  "   from the digest: users-digest-unsubscribe@xxxxxxxxxxxxxxxx
For additional commands, e-mail: users-help@xxxxxxxxxxxxxxxx