Do the Certificate CN matching to servername ?

Thanks

On Sat, Jun 29, 2013 at 12:31 AM, Darouichi, Aziz <adarouic@post03.curry.edu

wrote:

Hi,****

---

---

I am trying to configure TLS/SSL and I have a Cert from Geotrust . I configure slapd.conf with the followings:****

---

# TLS/SSL information****

---

# TLSCipherSuite HIGH:MEDIUM:+SSLv2****

TLSCACertificateFile /opt/local/etc/openldap/GeoTrust_Global_CA.cer****

TLSCertificateFile /opt/local/etc/openldap/rhea.curry.edu.pem.cer****

TLSCertificateKeyFile /opt/local/etc/openldap/rhea.key.pem****

---

But when I check the cert using “openssl s_client -connect 192.168.60.43:636 -CApath /opt/local/etc/openldap/” I get ****

CONNECTED(00000003)****

140230373582504:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:177:****

---****

no peer certificate available****

---****

No client certificate CA names sent****

---****

SSL handshake has read 0 bytes and written 321 bytes****

---****

New, (NONE), Cipher is (NONE)****

Secure Renegotiation IS NOT supported****

Compression: NONE****

Expansion: NONE****

---

I checked the log I see TLS connection ****

---

---