X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:references:in-reply-to:from:date
	:message-id:subject:to:content-type; q=dns; s=default; b=UVch/U0
	5jp7P4iMDAsfDtRSRC7fB81E6MTr6mhrD531AZgI9wIB6r5C98ZWH9XUiBqwQ322
	gDiOsDFWUCB4CaZ/nhHMIcZOz9QU1hZ11LLtnuR8uQXZIkDpsnNo88Ypq+IEopZi
	BwJtPGi+spvIYs6xfYnT3bNJaMw2cDFwZAis=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:references:in-reply-to:from:date
	:message-id:subject:to:content-type; s=default; bh=Tg4yikNQrZPzy
	wYd+44VfcGzI+w=; b=E5USQizCjiDitW55gcuLatI2qBwvcpcmadf9iD24W8mB2
	Q7yxT6Pwq35deH5PabnFiiZWRYzmZBwJf6oQpYCVy5fF4OHri31NfhjlQ9xttTz0
	UVbGcajWGkJH40FivHVBDMZTHRGan5Z5CgHSBqoTDkDcvUcGKT4h8/PGJyVLcY=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Spam-SWARE-Status:	No, score=-1.9 required=5.0 tests=AWL,BAYES_00,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=no version=3.3.1 spammy=Gratz, H*c:alternative, UD:cygwin.com, cygwincom
X-HELO:	mail-qt1-f172.google.com
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=QLAapD/tKPi8YuLcdPMHqOtf4sumS6Zi3HqbGBtAgAo=; b=QQl+BY89jPPbFKHxJQHK3leTNYsSoa3yG/H/B24jgl4GO1wuFt3v79debhAnwIvWxQ z5Hun3J/zjLsVPJwuRI1fJM/j+JtD9ptP/IoPBZhFkkDEnd+IokCs9fM+zNuQyouMrsQ lW3wjKrVmYM/VpReMppGfkI1EQh+41/v1nzMuoAjrL+X7oimtTIPIML95lgp7bv4uqbw w0BU1b3zKOFQ7kESEC47RFahP7k85SKhSjUrSgm2yIaHsvU8TORLIqeWg54UYWlELAns na0RIOXIdllzWoNQF7bvUGiwRH89httnICg6Zfu/wBAySgWhuDondUmCbJ/IKiKed7UW udFQ==
MIME-Version:	1.0
References:	<CAN9EdkY=zrEv31+PD8XXu9rVw4H_eXLEoMk5u=7H02Q1Xu7-Wg AT mail DOT gmail DOT com> <87ftmje5zb DOT fsf AT Rainer DOT invalid>
In-Reply-To:	<87ftmje5zb.fsf@Rainer.invalid>
From:	David Goldberg <dsg18096 AT gmail DOT com>
Date:	Fri, 2 Aug 2019 16:08:19 -0400
Message-ID:	<CAN9EdkYzh558w=CG3UkzgN0rg98eVx2V0BcdktEwVEW3dS1qCQ@mail.gmail.com>
Subject:	Re: Openldap 2.4.48-1 vs my company's pki
To:	cygwin AT cygwin DOT com
X-IsSubscribed:	yes

Thanks but unfortunately even after don't that I still get the complaint
that they're is a self signed certificate in the chain. We do indeed run
our own CA but it seems like that should not really be a problem.

On Fri, Aug 2, 2019, 15:13 Achim Gratz <Stromeko AT nexgo DOT de> wrote:

> David Goldberg writes:
> > I updated openldap from 2.4.42-1 to 2.4.48-1 this morning and now
> > ldapsearch will not connect, complaining that the server provided
> > certificate is self signed. I have set up /etc/pki with my company's
> > certificate chain and that allows 2.4.42-1 (and earlier) and other
> > applications to properly authenticate local services.
>
> The PKI layout was slightly changed a while ago and the newer openssl
> library used by the fresh openldap build may not pick up on the old
> locations anymore.  What you should do is place the certificates into
> the /etc/pki/ca-trust/source/anchors/ directory, then run
>
> # update-ca-trust extract
>
> which should correctly populate the directories that the libaries and
> applications use.
>
>
>
> Regards,
> Achim.
> --
> +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+
>
> Wavetables for the Terratec KOMPLEXER:
> http://Synth.Stromeko.net/Downloads.html#KomplexerWaves
>
> --
> Problem reports:       http://cygwin.com/problems.html
> FAQ:                   http://cygwin.com/faq/
> Documentation:         http://cygwin.com/docs.html
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
>
>

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -