Re: Again (still?) problems with php and ldaps

On Thu, Dec 06, 2001 at 12:08:12PM +0100, Susanne Benkert wrote: > After recompiling my Php with the newest LDAP-Libraries and Openssl > "ldap_connect("ldap://hostname")" works. But I still have problems with > "ldap_connect("ldaps://hostname")": Could you check whether ldapsearch -H "ldaps://hostname" works? PHP should work if and only if this works. As hostname you should use the same as the CN in the certificate, probably the FQDN (full hostname and domain). > What did I wrong? Does Php need its own Key/Certificate (as client > certificate)? Or is something wrong with my server certificate of Ldap? > (But I can't imagine, because other actions like ldapsearch already seem > to work with TLS.) Did you also try with -H ldaps:// and the same hostname? Client certificate is only needed if you put "TLSVerifyClient 1" in slapd.conf on the server. > Has anything should be change in the configuration of php when using it > with SSL and Openldap? No. I suggest you try to get ldapsearch -H ldaps://host/ to work first. If it doesn't work (and you don't get more answers here), please ask on the OpenLDAP lists. If you get ldapsearch -H to work, but not PHP, then this is the place to ask or submit a report at bugs.php.net. I'm pretty sure ldapsearch -H will give the same error though. I see now that you did mail the OpenLDAP list as well. I think that is the right place, but there is a danger people there will think it's a PHP problem. If you don't get answers there, test with ldapsearch -H, and if that fails, post that on the OpenLDAP list as well, since in that case PHP isn't involved. I could try to provide more help if necessary, but I'll be mostly available for over a week now, so I hope some others will offer help as well. Don't give up, Stig