RE: Debugging TLS negotiation failure

--On Monday, May 15, 2023 7:03 PM +0000 "Lemons, Terry" Terry.Lemons@dell.com wrote:

Hi Quanah

Thanks for the recommendation. I'm confused, then, that the official openldap.org documentation at https://www.openldap.org/doc/admin26/tls.html does NOT suggest use of cn=config. Can someone explain why?

I don't see anything in there saying not to use cn=config. Note that much of the documentation still needs conversion for cn=config, feel free to open up PRs in git.openldap.org fixing such documentation under ITS#7335.

Generally, I'd advise reading the slapd-config(5) man page. The Admin guide is a best effort, man page are authoratative.

https://www.openldap.org/software/man.cgi?query=slapd-config&apropos=0&sektion=0&manpath=OpenLDAP+2.6-Release&arch=default&format=html

--Quanah