Re: Q: LDAP - perl script using Net::LDAP and start_tls gives an error

2014-04-13 Thread Ric Moore
On 04/13/2014 04:45 PM, Snow Leopard wrote: Hi Atle, in my case I am certificate agency (self-signed certificate) and I issue "private key" and "certificate" (cacert.pem) as for root "CA" as for LDAP server (server-key.pem and server-cert.pem) and LDAP perl script client (client-key.pem and c

Re: Q: LDAP - perl script using Net::LDAP and start_tls gives an error

2014-04-13 Thread Snow Leopard
Hi Atle, in my case I am certificate agency (self-signed certificate) and I issue "private key" and "certificate" (cacert.pem) as for root "CA" as for LDAP server (server-key.pem and server-cert.pem) and LDAP perl script client (client-key.pem and client-cert.pem). The script and client run

Re: Q: LDAP - perl script using Net::LDAP and start_tls gives an error

2014-04-13 Thread Atle Solbakken
If I made a change in "start_tls" command for option "verify => none" to one of 'optional' or 'required' then I get next error message root@install:~/prog# ./ldap_sec.pl SSL connect attempt failed with unknown error error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify f