[Bug 217159] Re: slapd + gnutls fails

elvis elvisa at gmail.com
Fri Feb 27 01:07:57 GMT 2009


Oh, and the gnutls-cli stuff:

I opened the listening server with:
gnutls-serv --x509cafile my_ca.cer --x509keyfile myclient.pem --x509certfile myclient.cer

It returns:
Set static Diffie Hellman parameters, consider --dhparams.
Processed 1 CA certificate(s).
Echo Server ready. Listening to port '5556'.

I connected to the gnutls-serv with:
gnutls-cli --x509cafile my_ca.cer --x509keyfile myclient.pem --x509certfile myclient.cer -p 5556 servername.mydomain.tld

Similarly, I connected to Apache with
gnutls-cli --x509cafile my_ca.cer --x509keyfile myclient.pem --x509certfile myclient.cer -p 443 servername.mydomain.tld

And slapd with:
gnutls-cli --x509cafile my_ca.cer --x509keyfile myclient.pem --x509certfile myclient.cer -p 636 servername.mydomain.tld

Ports are listening and verified with "netstat -plutn".  Tests were run
on both localhost, and from another machine with copies of the certs.
No firewalls are in place, and iptables is set to "ACCEPT" on all
policies with no other rules in place.

As above, I get successful returns from Apache-SSL and gnutls-serv.  I
get a failure from slapd.

If you need more detail or other tests, please let me know and I'll run
them.

-- 
slapd + gnutls fails 
https://bugs.launchpad.net/bugs/217159
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to openldap in ubuntu.



More information about the Ubuntu-server-bugs mailing list