Re: apache2.0.55 w/ mod_ldap & tls
- From: Brent Kearney <brent@xxxxxxxxxxx>
- Date: Fri, 13 Jan 2006 16:39:19 -0700
Hi again,
To follow up on my own question, in case others upgrade from 2.0.54 and
run into this problem, 2.0.55 requires these two directives before SSL
is enabled in mod_ldap:
LDAPTrustedCA /etc/ssl/CA/cacert.pem
LDAPTrustedCAType BASE64_FILE
The debug logs now produce:
[Fri Jan 13 18:34:17 2006] [notice] LDAP: SSL support available
Cheers,
Brent
On Thu, Jan 12, 2006 at 07:56:14PM -0700, Brent Kearney wrote:
> Hello,
>
> I'm having some trouble getting apache's ldap module to connect to my openldap server
> using TLS. The reason it won't initiate an SSL connection is evident in the logs:
>
> [Thu Jan 12 20:45:49 2006] [debug] util_ldap.c(1341): LDAP: SSL trusted certificate authority file type - BASE64_FILE
> [Thu Jan 12 20:45:49 2006] [notice] SIGHUP received. Attempting to restart
> [Thu Jan 12 20:45:50 2006] [debug] util_ldap.c(1341): LDAP: SSL trusted certificate authority file type - BASE64_FILE
> [Thu Jan 12 20:45:51 2006] [notice] Digest: generating secret for digest authentication ...
> [Thu Jan 12 20:45:51 2006] [notice] Digest: done
> [Thu Jan 12 20:45:51 2006] [notice] LDAP: Built with OpenLDAP LDAP SDK
> [Thu Jan 12 20:45:51 2006] [notice] LDAP: SSL support unavailable
> [Thu Jan 12 20:45:51 2006] [notice] Apache/2.0.55 (FreeBSD) mod_ssl/2.0.55 OpenSSL/0.9.7e DAV/2 PHP/5.1.1 configured -- resuming normal operations
>
>
> I found this bug report, which details what looks like the same problem:
>
> http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/86416
>
> However, it also mentions that the bug was supposed to be fixed in Apache 2.0.55,
> which I'm running. As in that bug report, I am also using FreeBSD 5.4. I added
> "LDAPTrustedCAType BASE64_FILE" to my httpd.conf file as suggested, but it makes
> no difference.
>
> Ironically, it was working before I upgraded from apache 2.0.54.
>
> Any suggestions are welcome.
>
> Thanks,
>
> Brent
>
>
_______________________________________________
freebsd-questions@xxxxxxxxxxx mailing list
http://lists.freebsd.org/mailman/listinfo/freebsd-questions
To unsubscribe, send any mail to "freebsd-questions-unsubscribe@xxxxxxxxxxx"
- References:
- apache2.0.55 w/ mod_ldap & tls
- From: Brent Kearney
- apache2.0.55 w/ mod_ldap & tls
- Prev by Date: Re: BUg on latest mysql40-client portupgrade.
- Next by Date: External USB drive on Sun HW
- Previous by thread: apache2.0.55 w/ mod_ldap & tls
- Next by thread: portupgrade and portversion seg-fault in freebsd 6.0
- Index(es):
Relevant Pages
|
