note 92182 rejected from function.ldap-start-tls by danbrown
| From: | danbrown@php.net | Date: | Mon, 13 Jul 2009 16:16:00 +0000 |
| Subject: | note 92182 rejected from function.ldap-start-tls by danbrown | ||
| References: | 1 | Groups: | php.notes |
| Request: | Send a blank email to php-notes+get-158235@lists.php.net to get a copy of this message | ||
Note Submitter: ebouliane at gmail dot com
----
I've got a server that demands TLS encryption and each time I try to connect to either with
LDAPS or LDAP/with TLS I get
TLS trace: SSL3 alert write:fatal:handshake failure
TLS trace: SSL_accept:error in SSLv3 read client certificate B
TLS: can't accept.
TLS: error:140890C7:SSL routines:SSL3_GET_CLIENT_CERTIFICATE:peer did not return a certificate
s3_srvr.c:2474
How do I go about including a certificate in my ldap call? I can properly run ldapsearch from the
CLI and also here is my ldap.conf
TLS_CACERT /etc/openldap/certs/cacert.pem
TLS_CERT /etc/openldap/certs/servercert.pem
TLS_KEY /etc/openldap/certs/serverkey.pem
TLS_REQCERT demand
URI ldap://node0.ldap ldaps://node0.ldap
#host node0.ldap
#port 636
base dc=my,dc=company