X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:from:date:message-id:subject:to
	:content-type; q=dns; s=default; b=qWWaHjt1/QrZA1OqB9dho87AIsFF4
	8fIbSvOl5NxfpmvXI6e/49TwrdHAWfP9xIpxtBersqWOJ3up7t3SfCi6d+cmdYKK
	ROVk8gr1ze0AKhl+8DZEbdjQwKwl+ToHt0ecTHjIItjAhKjBx/KAvAzq6l4EM7se
	eTwmdOJH4T3VC4=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:from:date:message-id:subject:to
	:content-type; s=default; bh=s0s4fH9FrZyaReQMDsc/IqsytP4=; b=uRL
	B6an8Cf5om5R8+BOtdHbw5MlUj0Q0VzrkeQ6vcnkl5QzoSuiXU/1AfKmzmInYdgJ
	92ISBF4QcKxFePdfV6vjuBM4DYfW9L4m918W4BT4AZMjLJ8evaqbJhG7ALNDhSig
	0cbfeuHf/DUjeqadPlNis16jizxp7R4swbuHH2zw=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Spam-SWARE-Status:	No, score=-2.1 required=5.0 tests=AWL,BAYES_00,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=no version=3.3.1 spammy=openldap, H*c:alternative, services
X-HELO:	mail-qk1-f171.google.com
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:from:date:message-id:subject:to; bh=kJijQWFGWFf8OoO9OOpJSU+YKvtspePMKG+JkktcQmE=; b=iqrWG+iHR8Yi77pKU11CdBejSqdsNAaWkgNem9vvQi21PkW+HvGoJf58WUdqsgzYvq bchrNWzETX0B5tV86ZVRItQ8upqwuCEpdYAMi09KXDSM6ifVhuFulmBwbPzRhSzJ1pkZ 1KydzYc4LzBEVIY2wbGJhknYFzDE5azEEz2IsbrD/0gIVGj790hyp+/gXZFTLOmKF80r nkFXUHFnjohBsfC9wAiuiJHI3WKAmTMZIXRvXpD3AWMVs5ShTfYkXGhrt34rgbxCDWb2 7TMEsXNOELHxJGYsUvWANwmJp4kRK3NEf9DVGJNE6cgIF/rSv3luojthgN2u8S8npCR3 q0lg==
MIME-Version:	1.0
From:	David Goldberg <dsg18096 AT gmail DOT com>
Date:	Fri, 2 Aug 2019 11:45:40 -0400
Message-ID:	<CAN9EdkY=zrEv31+PD8XXu9rVw4H_eXLEoMk5u=7H02Q1Xu7-Wg@mail.gmail.com>
Subject:	Openldap 2.4.48-1 vs my company's pki
To:	cygwin AT cygwin DOT com
X-IsSubscribed:	yes

I updated openldap from 2.4.42-1 to 2.4.48-1 this morning and now
ldapsearch will not connect, complaining that the server provided
certificate is self signed. I have set up /etc/pki with my company's
certificate chain and that allows 2.4.42-1 (and earlier) and other
applications to properly authenticate local services. What has changed in
2.4.48-1 that causes this to not work and how can I fix it. I've downgraded
for now; that is not a good long term solution of course.

Thanks,

Dave Goldberg

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -