RE: Debugging TLS negotiation failure

Hi Carsten

Thanks for your reply.

Hello list,

if I understand the listed configuration correctly slapd is started with online config and the TLS information is configured in the static config file slapd.conf. Is this kind of mixed configuration valid or do the TLS information have to be configured in corresponding olc-Attributes in cn=config?

I followed the instructions in https://www.openldap.org/doc/admin26/tls.html. That document contains:

16.2.1. Server Configuration The configuration directives for slapd belong in the global directives section of slapd.conf(5).

This meant, to me, that I needed to add them to /usr/local/etc/openldap/slapd.conf. Please correct me if needed.

Thanks tl

Internal Use - Confidential