6 reputation
3
bio website
location Carleton University, Canada
age
visits member for 1 year, 9 months
seen Jul 16 '13 at 12:22

Systems Administrator, M.C.S., B.C.S., B.Sc.


Jan
14
comment ldap authentication not working with start_tls option after certificate upgrade
It's the correct cert because I use the same one on my other clients. Yes the port is 389 and ldapsearch gives the 'ldap_start_tls: Connect error (-11)' error. At least I am using ssl now, better than before, but its a mystery why it won't take my cert.
Jan
14
comment ldap authentication not working with start_tls option after certificate upgrade
Thanks for your response. I tried the 'openssl' command and it read the certificate and I expected 2048 bit key but it has 1024 and the signature algorithm is sha1WithRSAEncryption and I expected sha512WithRSAEncryption. Turns out the shaw512 is the encryption algorithm used on the passwords not on the signature algorithm. Doesn't really matter because this is a working cert on some of my other machines. The ldapsearch command gave me an error: 'ldap_start_tls: Connect error (-11)'. Oh and I was able to get ssl start_tls working if I set 'tls_checkpeer no'.