Re: TLS/SSL and self-signed certificates

Dieter Kluenter wrote:

Rick Stevensrps2@socal.rr.com writes:

...

I know this has been hashed over before, but I simply cannot get my LDAP clients to talk TLS/SSL to my LDAP server. I keep getting

TLS certificate verification: Error, self signed certificate in certificate chain

This error may not be the culprit, if the error (or warning) is referring to the CA.

Wrong. It is *exactly* the culprit.

What is the CN of the server certificate and what is the host part of your search string?

If the cert CN were the problem, the error message would have said that. Don't second-guess these error messages.

In order to debug the TLS session run ldapsearch with -d3 option.