On 23. mars 2015 12:45, Ulrich Windl wrote:
Related question: If the command above fails with "stronger confidentiality required", and adding "-ZZ" fails with " TLS: hostname does not match CN in peer certificate", how should a proper certificate look like?
Read the OpenLDAP Admin Guide, section 16 (TLS). In particular 16.1.1. Server Certificates.