On 26/07/10 15:20 -0700, Bryan Boone wrote:

Hi everyone.  I am trying to develop an ldap client that uses SSL.

I read in the documentation on the openldap website this...

You must also install a copy of the CA certificate on all of your client machines. Configuration is done in /usr/local/etc/openldap/ldap.conf:

TLS_CACERT /usr/local/etc/openldap/cacert.pem Does this mean that the function ldap_start_tls_s()performs mutual SSL authentication???

See chapter 16 of the OpenLDAP Administrator's Guide, specifically TLSVerifyClient and TLS_CERT.

If I want to achieve server side authentication, does that mean I will have to use the openSSL libraries to get the server cert prior to using the ldap_start_tls_s() function???

No. I don't believe you'll need to directly call any SSL libraries to make use of it.