From: Xeno Campanoli <xeno.campanoli@...>
Date: 2009-06-02T06:54:39+09:00
Subject: Re: Something Not going with my LDAP using SSL

Xeno Campanoli wrote:

My apologies for leaving the wrong heading on there.  That last post was me not 
Brian.

Say, it appears my guess was right.  the ruby/1.8/openssl.rb has it's first 
require as 'openssl.so'.  Perhaps I need to get further into this to understand 
how these interfaces to an so library works, but at this point I am a bit lost.

> Brian Candler wrote:
> 
> Say, is anyone else out there able to run the script successfully that I 
> post? We can run it from some Redhat and CentOS machines but not from 
> Ubuntu Server. It's just a matter of having a working ldap server with 
> some u/p with access available with a similar hostname / port 
> combination and trying it.  It was easy to get folks to try it in my 
> environment.
> xc
> 
> 
>> Xeno Campanoli wrote:
>>> Xeno Campanoli wrote:
>>>>> not a normal FIN?
>>>> SSL-Session:
>>>>     Timeout   : 300 (sec)
>>>>     Verify return code: 19 (self signed certificate in certificate 
>>>> chain)
>>>>
>>>>
>>> I think we had a different response Friday.  Is it possible that 
>>> install of
>>> libopenssl-ruby has changed the cert location?
>>
>> I doubt very much that installing libopenssl-ruby could affect openssl 
>> (the command line utility)
>>
>> So far I've seen no evidence to suggest that the certificate is the 
>> problem, but now libopenssl-ruby is installed perhaps it is. Look 
>> through the source to LDAP::SSLconn and see what option you need to 
>> set to give the certificate path (or perhaps you can set an 
>> environment variable). Adding some $stderr.puts debugging to see 
>> what's going on would be a good idea too.
> 
> 
>