How did you create the certificates?  Can slapd read them?<br><br><div class="gmail_quote">On Fri, Jul 10, 2009 at 5:00 AM, Asimananda Mohanty <span dir="ltr">&lt;<a href="mailto:asimananda.mohanty@gmail.com">asimananda.mohanty@gmail.com</a>&gt;</span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex;"><span style="color:rgb(51, 51, 255)">Hi All,</span><br style="color:rgb(51, 51, 255)"><br style="color:rgb(51, 51, 255)">
<span style="color:rgb(51, 51, 255)">I am currently busy configuring OpenLdap on my newly installed Ubuntu 9.04.</span><br style="color:rgb(51, 51, 255)">
<br style="color:rgb(51, 51, 255)"><span style="color:rgb(51, 51, 255)">Here is what I have done till now.</span><br style="color:rgb(51, 51, 255)"><br style="color:rgb(51, 51, 255)"><span style="color:rgb(51, 51, 255)">I followed the steps defined in <a href="https://help.ubuntu.com/8.10/serverguide/C/openldap-server.html" target="_blank">https://help.ubuntu.com/8.10/serverguide/C/openldap-server.html</a> and installation was successful. I installed PhpLdapAdmin also.</span><br style="color:rgb(51, 51, 255)">

<br style="color:rgb(51, 51, 255)"><span style="color:rgb(51, 51, 255)">After I created certificate, key etc, I created a .ldif file (enable-ca.ldif) with the following content :</span><br style="color:rgb(51, 51, 255)">

<br style="color:rgb(51, 51, 255)"><b><span style="color:rgb(51, 51, 255)">dn: cn=config</span><br style="color:rgb(51, 51, 255)"><span style="color:rgb(51, 51, 255)">add: olcTLSCACertificateFile</span><br style="color:rgb(51, 51, 255)">

<span style="color:rgb(51, 51, 255)">olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem</span><br style="color:rgb(51, 51, 255)"><span style="color:rgb(51, 51, 255)">-</span><br style="color:rgb(51, 51, 255)"><span style="color:rgb(51, 51, 255)">add: olcTLSCertificateFile</span><br style="color:rgb(51, 51, 255)">

<span style="color:rgb(51, 51, 255)">olcTLSCertificateFile: /etc/ssl/certs/server.crt</span><br style="color:rgb(51, 51, 255)"><span style="color:rgb(51, 51, 255)">-</span><br style="color:rgb(51, 51, 255)"><span style="color:rgb(51, 51, 255)">add: olcTLSCertificateKeyFile</span><br style="color:rgb(51, 51, 255)">

<span style="color:rgb(51, 51, 255)">olcTLSCertificateKeyFile: /etc/ssl/private/server.key</span></b><br style="color:rgb(51, 51, 255)"><br style="color:rgb(51, 51, 255)"><span style="color:rgb(51, 51, 255)">Then I executed the command :</span><br style="color:rgb(51, 51, 255)">

<br style="color:rgb(51, 51, 255)"><b><span style="color:rgb(51, 51, 255)">ldapmodify -D &quot;cn=admin,cn=config&quot; -x -w 12345678 -f enable-ca.ldif</span></b><br style="color:rgb(51, 51, 255)"><br style="color:rgb(51, 51, 255)">

<span style="color:rgb(51, 51, 255)">and it was a success.</span><br style="color:rgb(51, 51, 255)"><br style="color:rgb(51, 51, 255)"><span style="color:rgb(51, 51, 255)">But after this, when I tried to restart slapd, I got errors like the following :</span><br style="color:rgb(51, 51, 255)">

<br style="color:rgb(51, 51, 255)"><b style="color:rgb(255, 0, 0)">main: TLS init def ctx failed: -1</b><br style="color:rgb(51, 51, 255)"><br style="color:rgb(51, 51, 255)"><span style="color:rgb(51, 51, 255)">I noticed that after I executed &quot;ldapmodify -D &quot;cn=admin,cn=config&quot; -x -w 12345678 -f enable-ca.ldif&quot;, </span><font style="color:rgb(51, 51, 255)" color="Blue">3 lines are added to /etc/ldap/slapd.d/</font><font style="color:rgb(51, 51, 255)" color="Blue">cn=config.ldif and when I commented the last two lines like the following,  slapd started successfully.<br>

<br><b>olcTLSCACertificateFile: /etc/ssl/certs/cacert.pem<br>#olcTLSCertificateFile: /etc/ssl/certs/server.crt<br>#olcTLSCertificateKeyFile: /etc/ssl/private/server.key</b><br><br>This looks quite strange.<br><br>Please help me resolving the same.<br>

<br>-Asimananda<br></font>
</blockquote></div><br>