Bug 100553

Summary:	openLDAP ssl Authentication fails
Product:	Gentoo Linux	Reporter:	gunter kreck <gunter>
Component:	[OLD] Server	Assignee:	Gentoo Linux bug wranglers <bug-wranglers>
Status:	RESOLVED INVALID
Severity:	normal
Priority:	High
Version:	unspecified
Hardware:	All
OS:	Linux
Whiteboard:
Package list:		Runtime testing required:	---

Description gunter kreck 2005-07-28 00:22:55 UTC

When I use the <b>Gentoo Guide to OpenLDAP Authentication</b> and follow all in
this howto described steps to install the openLDAP Server I come to the
following command:

ldapsearch -D "cn=Manager,dc=my-domain,dc=de" -W -d 255

this command prints out the following error:

TLS certificate verification: Error, self signed certificate
tls_write: want=7, written=7
  0000:  15 03 01 00 02 02 30                               ......0
TLS trace: SSL3 alert write:fatal:unknown CA
TLS trace: SSL_connect:error in SSLv3 read server certificate B
TLS trace: SSL_connect:error in SSLv3 read server certificate B
TLS: can't connect.
ldap_perror
ldap_bind: Can't contact LDAP server (81)




Reproducible: Always
Steps to Reproduce:

Comment 1 Jakub Moc (RETIRED) gentoo-dev

2005-07-28 00:30:02 UTC

(In reply to comment #0)
> TLS certificate verification: Error, self signed certificate

You cannot use self-signed certificates, this is not a bug. Set up a proper CA,
then create the certificates to be used.