X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:references:in-reply-to:from:date
	:message-id:subject:to:content-type; q=dns; s=default; b=fRDSpxX
	35kvNz8ehCfs+/QSoXJQ7sxdlqrQELAh79bvbM8Mr99/XGhuvaMJIbO9EhvVyk12
	uLWypqFIMnYy44G4aQ7ouSLaMBOk8bOn24q8tl0pb4F8KUQlRsXjb7FbGnxHL0/9
	XYdGOywgyO7mgUC9O+Q/4swOWc8aXvLwtjMk=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:mime-version:references:in-reply-to:from:date
	:message-id:subject:to:content-type; s=default; bh=qFqp9XNWn6Crw
	+Ulx18KgRJniho=; b=Sp6nPkblZ7m9/FUZyM7JSc4AGZcznfHQILrf66NcQCtRf
	aGul++tJoIhtVvI01w+GCsAk5/C2VuxH3dD9GWMFK8LfJPXk4AfPw+RK4K/kfuO1
	Ja/WN0f64MO6I6uakc/i2S/4VXe0vyx49QoM4QXFbZY/k992kTXANMHFX4nj70=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Spam-SWARE-Status:	No, score=-1.7 required=5.0 tests=AWL,BAYES_00,FREEMAIL_ENVFROM_END_DIGIT,FREEMAIL_FROM,HTML_MESSAGE,RCVD_IN_DNSWL_NONE,SPF_PASS autolearn=no version=3.3.1 spammy=Gratz, gratz, H*c:alternative, cygwincom
X-HELO:	mail-qt1-f196.google.com
DKIM-Signature:	v=1; a=rsa-sha256; c=relaxed/relaxed; d=gmail.com; s=20161025; h=mime-version:references:in-reply-to:from:date:message-id:subject:to; bh=vMzwKw+iB7nYT5lSHg+XSfvk4QrZ8jqV3EO/+fBMATI=; b=M+0sQmJdjuGUMXoowthSZmplUmkriMkfQgsjSJrShMTyYhURvXClPJCBAbwjycLKJ7 9qhX/FnaJLX72XxZ3TyIKwKSMLmjMUn1zy1bQNKOqtYfKuMB0D/Ws3JQQ2n9jzuRigaZ zfEP9tFO9hkka2m/CXYsRYs6SYUOnwyc4XS7i4K3YQTPw22Par4me2BgPX7AYvggsvFl scjocLuqWDfI1KcJMk2uCGnMivLSDI97993z7ZKDGYg0zUft4h2XApVcLjxiOOHbZxMJ qDYilLsFXfCmV/d9W87/80GCgAai1g1jGBEhfXPwFS0KLvUki94GJegl19Vj8X/SF/ea sg+w==
MIME-Version:	1.0
References:	<CAN9EdkY=zrEv31+PD8XXu9rVw4H_eXLEoMk5u=7H02Q1Xu7-Wg AT mail DOT gmail DOT com> <87ftmje5zb DOT fsf AT Rainer DOT invalid> <CAN9EdkYzh558w=CG3UkzgN0rg98eVx2V0BcdktEwVEW3dS1qCQ AT mail DOT gmail DOT com> <874l2y4ulo DOT fsf AT Rainer DOT invalid> <CAN9EdkYG1aFnaMAPM3jg=0psRoiS1rF7Hze618UYj1mHByjKbg AT mail DOT gmail DOT com> <228DE7899A9CF9C913C8B1B8 AT 192 DOT 168 DOT 1 DOT 39> <CAN9Edkbv6ZaHyLs3MVyYapgYa3XiXU2D+kr8o2zTCJivk8h0-w AT mail DOT gmail DOT com> <874l2ufdlo DOT fsf AT Rainer DOT invalid>
In-Reply-To:	<874l2ufdlo.fsf@Rainer.invalid>
From:	David Goldberg <dsg18096 AT gmail DOT com>
Date:	Tue, 6 Aug 2019 15:17:14 -0400
Message-ID:	<CAN9EdkZjtczZ8hhzWTLga3iMVn+VwFOv1XNC2RZJBQUpCq+z_Q@mail.gmail.com>
Subject:	Re: Openldap 2.4.48-1 vs my company's pki
To:	cygwin AT cygwin DOT com
X-IsSubscribed:	yes

Thank you, Achim!  I should have thought of that myself. Indeed adding an
appropriate TLS_CACERT to ldap.conf has solved the problem and 2.4.48
ldapsearch is working now.

On Tue, Aug 6, 2019, 12:44 Achim Gratz <Stromeko AT nexgo DOT de> wrote:

> David Goldberg writes:
> > Correct, openssl s_client works, as does the older build of ldapsearch.
> I
> > can't find any .ldaprc nor ldap.conf files on my system.
>
> Then work the other way around and create a configuration file that
> points to the PKI.  It's entirely possible that the compiled-in default
> (if there even is one) is not correct.  If so I'll have to figure out
> how to change that, but until then it would be useful to know if things
> start working when the config is pointing to the existing PKI (which, as
> you tested can be used correctly by openssl).
>
>
> Regards,
> Achim.
> --
> +<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+
>
> SD adaptations for Waldorf Q V3.00R3 and Q+ V3.54R2:
> http://Synth.Stromeko.net/Downloads.html#WaldorfSDada
>
> --
> Problem reports:       http://cygwin.com/problems.html
> FAQ:                   http://cygwin.com/faq/
> Documentation:         http://cygwin.com/docs.html
> Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple
>
>

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple

- Raw text -