On 7/20/19 8:45 PM, Nikos Voutsinas wrote:
Weird... My build of OPENLDAP_REL_ENG_2_4_48 on Debian/Buster against openssl was working, without using the olcTLSCACertificateFile.
Why that happens is a good question.
You probably have to dig a bit deeper and examine whether the OpenSSL lib initializes a default trust store generated by update-ca-certificates (from Debian package ca-certificates) and whether your CA cert is present there.
Ciao, Michael.