X-Recipient: archive-cygwin AT delorie DOT com
DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:references:date:in-reply-to
	:message-id:mime-version:content-type; q=dns; s=default; b=f8ERK
	pLvJn6O7ZnDVYliNxo9q9h2NUxwNieF50IU8dKGjSpLQxDyfDOINb7ypS/XFyPSW
	1BhP7HVlMz/GLbNtLlwzLbiJo52njRes0XKQ4/kVytVjpZ4vMbHrEk6s+IiqbyHL
	/QzhZiO9bJelQ9A0aDr8Ah1l4Ge2ZA3jrpAafE=
DKIM-Signature: v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:from:to:subject:references:date:in-reply-to
	:message-id:mime-version:content-type; s=default; bh=q3KneLo7BZ0
	wPMk+CSBnFUX5Zxc=; b=I0NMiwS1dOqpyqatC+k4HmIeMgHWwjyLC+17xd8GKwY
	42VIqCbqwuW2+6BYn0foDX3C3d8bheT2TZ8pIwAWraOcfLcfGPv+QC+mS8GA4HMG
	S6EPpiUFgcQ388BQQR1cNQwuKJdqa3Z8ZHryBUR3YOpUfwQoo0Be+ltfLzKdVSg8
	=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id: <cygwin.cygwin.com>
List-Subscribe: <mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive: <http://sourceware.org/ml/cygwin/>
List-Post: <mailto:cygwin AT cygwin DOT com>
List-Help: <mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Delivered-To: mailing list cygwin AT cygwin DOT com
Authentication-Results: sourceware.org; auth=none
X-Spam-SWARE-Status: No, score=-0.9 required=5.0 tests=AWL,BAYES_50,SPF_PASS autolearn=ham version=3.3.1 spammy=WAVE, Matrix12, matrix-12, downloads.html
X-HELO: mx009.vodafonemail.xion.oxcs.net
From: Achim Gratz <Stromeko AT nexgo DOT de>
To: cygwin AT cygwin DOT com
Subject: Re: Openldap 2.4.48-1 vs my company's pki
References: <CAN9EdkY=zrEv31+PD8XXu9rVw4H_eXLEoMk5u=7H02Q1Xu7-Wg AT mail DOT gmail DOT com>	<87ftmje5zb DOT fsf AT Rainer DOT invalid>	<CAN9EdkYzh558w=CG3UkzgN0rg98eVx2V0BcdktEwVEW3dS1qCQ AT mail DOT gmail DOT com>	<874l2y4ulo DOT fsf AT Rainer DOT invalid>	<CAN9EdkYG1aFnaMAPM3jg=0psRoiS1rF7Hze618UYj1mHByjKbg AT mail DOT gmail DOT com>
Date: Mon, 05 Aug 2019 21:38:59 +0200
In-Reply-To: <CAN9EdkYG1aFnaMAPM3jg=0psRoiS1rF7Hze618UYj1mHByjKbg@mail.gmail.com>	(David Goldberg's message of "Mon, 5 Aug 2019 08:22:18 -0400")
Message-ID: <87ef1zflm4.fsf@Rainer.invalid>
User-Agent: Gnus/5.13 (Gnus v5.13) Emacs/26.2 (gnu/linux)
MIME-Version: 1.0
Content-Type: text/plain

David Goldberg writes:
> Sorry, was away from work over the weekend. I just tested with openssl
> s_client and it works just fine.  Version is 1.1.1.  there is no self
> signed certificate. It's signed with the company pki rather than commercial
> and I've properly installed that chain.

Good.  Then, as I suggested before, the most likely culprit is some
configuration for openldap that points at a PKI location that is not
up-to-date or nonexisting.

> The problem send to be with the new build, at least the weird ldd
> output leads me to that conclusion. I'll try to find some time to
> build from source and see if it works.

I can't see how that would help or why you think the ldd output is
wierd.  There are exactly no changes to the new build vs. the old one
other than that it has of course picked up the new openssl as a depency
(that was the whole point of updating it) and I've removed some
changes to the tests that are not necessary for the current build
environment.


Regards,
Achim.
-- 
+<[Q+ Matrix-12 WAVE#46+305 Neuron microQkb Andromeda XTk Blofeld]>+

Waldorf MIDI Implementation & additional documentation:
http://Synth.Stromeko.net/Downloads.html#WaldorfDocs

--
Problem reports:       http://cygwin.com/problems.html
FAQ:                   http://cygwin.com/faq/
Documentation:         http://cygwin.com/docs.html
Unsubscribe info:      http://cygwin.com/ml/#unsubscribe-simple