search for: olctlscacertificatefil

...it's working ok... > > I would suggest double-checking key/certs setup on OpenLDAP side; for > the test I have used LE certs, utilizing following cn=config > attributes: > > olcTLSCertificateKeyFile contains private key > olcTLSCertificateFile contains certificate > olcTLSCACertificateFile contains both certs (DST Root CA X3 > and Let's Encrypt Authority X3) > > and used the same CA file in Dovecot's tls_ca_cert_file > > Is ldapsearch working ok (-ZZ) and only Dovecot has troubles or ... ? > > > > Hope that helps, good luck ;) > Tomas...

Hello guys, actually I'm trying to configure dovecot to access openldap for passwordcheck. My openldap is only allow access over "secure ldap". The dovecot can communicate with the openldap server but there is maybe a failure in the sslhandshake. Additional information you can find in the logs or in the dump below. Also I have my ldap config from dovecot in the links below. I

...certs setup on OpenLDAP side; >>> for >>> the test I have used LE certs, utilizing following cn=config >>> attributes: >>> >>> olcTLSCertificateKeyFile contains private key >>> olcTLSCertificateFile contains certificate >>> olcTLSCACertificateFile contains both certs (DST Root CA X3 >>> and Let's Encrypt Authority X3) >>> >>> and used the same CA file in Dovecot's tls_ca_cert_file >>> >>> Is ldapsearch working ok (-ZZ) and only Dovecot has troubles or ... >&gt...

...>>>>> the test I have used LE certs, utilizing following cn=config >>>>> attributes: >>>>> >>>>> olcTLSCertificateKeyFile contains private key >>>>> olcTLSCertificateFile contains certificate >>>>> olcTLSCACertificateFile contains both certs (DST Root CA X3 >>>>> and Let's Encrypt Authority X3) >>>>> >>>>> and used the same CA file in Dovecot's tls_ca_cert_file >>>>> >>>>> Is ldapsearch working ok (-ZZ) and o...

...ne, but tried over inet with STARTTLS and it's working ok... I would suggest double-checking key/certs setup on OpenLDAP side; for the test I have used LE certs, utilizing following cn=config attributes: olcTLSCertificateKeyFile contains private key olcTLSCertificateFile contains certificate olcTLSCACertificateFile contains both certs (DST Root CA X3 and Let's Encrypt Authority X3) and used the same CA file in Dovecot's tls_ca_cert_file Is ldapsearch working ok (-ZZ) and only Dovecot has troubles or ... ? Hope that helps, good luck ;) Tomas On 03/17/2017 04:27 PM, info at gwarband.de wrot...

...dn: cn=config objectClass: olcGlobal cn: config olcArgsFile: /var/run/slapd/slapd.args olcLogLevel: none olcPidFile: /var/run/slapd/slapd.pid olcToolThreads: 1 structuralObjectClass: olcGlobal entryUUID: e61f99ae-9076-1032-9144-9f2ad5621c65 creatorsName: cn=config createTimestamp: 20130803105505Z olcTLSCACertificateFile: /etc/ssl/certs/ca-certificates.crt olcTLSCertificateKeyFile: /etc/ssl/private/omv-domain-local.key olcTLSCertificateFile: /etc/ssl/certs/omv-domain-local.crt olcTLSVerifyClient: demand entryCSN: 20130803125708.704922Z#000000#000#000000 modifiersName: gidNumber=0+uidNumber=0,cn=peercred,cn=externa...

...ed LE certs, utilizing following cn=config >>>>>>> attributes: >>>>>>> >>>>>>> olcTLSCertificateKeyFile contains private key >>>>>>> olcTLSCertificateFile contains certificate >>>>>>> olcTLSCACertificateFile contains both certs (DST Root CA >>>>>>> X3 >>>>>>> and Let's Encrypt Authority X3) >>>>>>> >>>>>>> and used the same CA file in Dovecot's tls_ca_cert_file >>>>>>&...

...gt; >> I would suggest double-checking key/certs setup on OpenLDAP side; for >> the test I have used LE certs, utilizing following cn=config attributes: >> >> olcTLSCertificateKeyFile contains private key >> olcTLSCertificateFile contains certificate >> olcTLSCACertificateFile contains both certs (DST Root CA X3 >> and Let's Encrypt Authority X3) >> >> and used the same CA file in Dovecot's tls_ca_cert_file >> >> Is ldapsearch working ok (-ZZ) and only Dovecot has troubles or ... ? >> >> >> &...

...tup on OpenLDAP side; for >>>> the test I have used LE certs, utilizing following cn=config >>>> attributes: >>>> >>>> olcTLSCertificateKeyFile contains private key >>>> olcTLSCertificateFile contains certificate >>>> olcTLSCACertificateFile contains both certs (DST Root CA X3 >>>> and Let's Encrypt Authority X3) >>>> >>>> and used the same CA file in Dovecot's tls_ca_cert_file >>>> >>>> Is ldapsearch working ok (-ZZ) and only Dovecot has troubl...

...t; the test I have used LE certs, utilizing following cn=config >>>>>> attributes: >>>>>> >>>>>> olcTLSCertificateKeyFile contains private key >>>>>> olcTLSCertificateFile contains certificate >>>>>> olcTLSCACertificateFile contains both certs (DST Root CA X3 >>>>>> and Let's Encrypt Authority X3) >>>>>> >>>>>> and used the same CA file in Dovecot's tls_ca_cert_file >>>>>> >>>>>> Is ldapsearch work...

...ing following cn=config >>>>>>>> attributes: >>>>>>>> >>>>>>>> olcTLSCertificateKeyFile contains private key >>>>>>>> olcTLSCertificateFile contains certificate >>>>>>>> olcTLSCACertificateFile contains both certs (DST Root CA X3 >>>>>>>> and Let's Encrypt Authority X3) >>>>>>>> >>>>>>>> and used the same CA file in Dovecot's tls_ca_cert_file >>>>>>>> >>&gt...