From: Xeno Campanoli <xeno.campanoli@...>
Date: 2009-06-02T06:39:42+09:00
Subject: Re: Something Not going with my LDAP using SSL

Brian Candler wrote:

Say, is anyone else out there able to run the script successfully that I post? 
We can run it from some Redhat and CentOS machines but not from Ubuntu Server. 
It's just a matter of having a working ldap server with some u/p with access 
available with a similar hostname / port combination and trying it.  It was easy 
to get folks to try it in my environment.
xc


> Xeno Campanoli wrote:
>> Xeno Campanoli wrote:
>>>> not a normal FIN?
>>> SSL-Session:
>>>     Timeout   : 300 (sec)
>>>     Verify return code: 19 (self signed certificate in certificate chain)
>>>
>>>
>> I think we had a different response Friday.  Is it possible that install 
>> of
>> libopenssl-ruby has changed the cert location?
> 
> I doubt very much that installing libopenssl-ruby could affect openssl 
> (the command line utility)
> 
> So far I've seen no evidence to suggest that the certificate is the 
> problem, but now libopenssl-ruby is installed perhaps it is. Look 
> through the source to LDAP::SSLconn and see what option you need to set 
> to give the certificate path (or perhaps you can set an environment 
> variable). Adding some $stderr.puts debugging to see what's going on 
> would be a good idea too.