I am trying to get FDS 1.0.2 working in SSL mode. I am using a OpenSSL
CA, I have installed the Server Cert and the CA Cert, can start FDS in
SSL mode, but when I run
ldapsearch -x -ZZ I get TLS trace: SSL3 alert write:fatal:unknown CA.
In /etc/ldap.conf, I have put in
TLS_CACERT /path/to/cert
TLSREQCERT allow
ssl on
ssl start_tls
If I run
openssl s_client -connect localhost:636 -showcerts -state -CAfile
/path/to/cacert.pem
It looks OK
Please help
Thanks
--
Jeff Gamsby
Center for X-Ray Optics
Lawrence Berkeley National Laboratory
(510) 486-7783
--
Fedora-directory-users mailing list
Fedora-directory-users@xxxxxxxxxx
https://www.redhat.com/mailman/listinfo/fedora-directory-users
