--On Wednesday, July 12, 2017 12:04 PM -0700 Ryan Tandy ryan@nardis.ca wrote:

On Wed, Jul 12, 2017 at 05:57:51PM +0000, Jon C Kidder wrote:

...

I then see an fopen for this file /appl/openldap/etc/openldap/tls/3a89cd48.0. I have no idea where this file name came from.

http://www.openldap.org/doc/admin24/tls.html#TLS_CACERTDIR%20%3Cpath%3E

https://www.openssl.org/docs/man1.1.0/apps/c_rehash.html

If there is nothing in his code OR ~/.ldaprc, system ldap.conf, etc, referencing the TLS_CACERTDIR then it seems there's a bug, since it should only be trying to find the CA Cert hash if that's been set.

--Quanah

--

Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com