Re: TLS problem

On 07/07/2010 11:17 AM, Cedric Jeanneret wrote:

Hello,

I'm trying to configure an openldap with TLS so that all connections are encrypted.

Here's the revelent part of my slapd.conf:

TLSCipherSuite HIGH:MEDIUM:+SSLv3 TLSVerifyClient never TLSCertificateFile /etc/ldap/ssl/server.crt TLSCertificateKeyFile /etc/ldap/ssl/server.key

Here's my ldap.conf:

URI ldaps://my.server.ltd BASE dc=my,dc=server,dc=ltd LDAP_VERSION 3

#SIZELIMIT 12 #TIMELIMIT 15 #DEREF never ssl start_tls ssl on TLS_CIPHER_SUITE HIGH:MEDIUM:+SSLv3

Add

TLS_REQCERT allow

to your ldap.conf. See the ldap.conf man page for more information.

Regards,

Hugo Monteiro.