Re: (ITS#6352) Not all certificates are read if the TLS_CACERTDIR contains broken links

steffen.gruner@basf.com wrote:

Full_Name: Steffen Gruner Version: 2.3.43 OS: Gentoo Linux URL: Submission from: (NULL) (84.171.177.13)

If in the TLS_CACERTDIR (/etc/ssl/certs/ on by box) contains broken symbolic links the ldapsearch command stops on the first broken link and doesn't use all the other certificates.

This functionality is provided by the OpenSSL library; you should file this bug report with them. In the meantime, now you know yet another reason why we recommend using TLS_CACERT instead of TLS_CACERTDIR.