8 Apr
2026
8 Apr
'26
10:58 a.m.
Emmanuel Seyman wrote:
- Howard Chu [08/04/2026 16:26] :
You've configured the slapd server. You haven't configured the CA certs for the LDAP clients.
Sorry, I forgot to mention that I've set TLS_CACERTDIR in /etc/openldap/ldap.conf to /etc/openldap/certs
A CA certdir requires each CA cert to be in its own file, and the directory must be processed with the c_rehash script otherwise OpenSSL won't be able to find any of them.
You should just use TLS_CACERT instead if you're keeping multiple CA certs in one file.
--
-- Howard Chu
CTO, Symas Corp. http://www.symas.com
Director, Highland Sun http://highlandsun.com/hyc/
Chief Architect, OpenLDAP http://www.openldap.org/project/