Skip site navigation (1)Skip section navigation (2)
Date:      Thu, 12 Jan 2006 19:56:15 -0700
From:      Brent Kearney <brent@kearneys.ca>
To:        freebsd-questions@freebsd.org
Subject:   apache2.0.55 w/ mod_ldap & tls
Message-ID:  <20060113025614.GA5073@kearneys.ca>

next in thread | raw e-mail | index | archive | help
Hello,

I'm having some trouble getting apache's ldap module to connect to my openldap server 
using TLS.  The reason it won't initiate an SSL connection is evident in the logs:

[Thu Jan 12 20:45:49 2006] [debug] util_ldap.c(1341): LDAP: SSL trusted certificate authority file type - BASE64_FILE
[Thu Jan 12 20:45:49 2006] [notice] SIGHUP received.  Attempting to restart
[Thu Jan 12 20:45:50 2006] [debug] util_ldap.c(1341): LDAP: SSL trusted certificate authority file type - BASE64_FILE
[Thu Jan 12 20:45:51 2006] [notice] Digest: generating secret for digest authentication ...
[Thu Jan 12 20:45:51 2006] [notice] Digest: done
[Thu Jan 12 20:45:51 2006] [notice] LDAP: Built with OpenLDAP LDAP SDK
[Thu Jan 12 20:45:51 2006] [notice] LDAP: SSL support unavailable
[Thu Jan 12 20:45:51 2006] [notice] Apache/2.0.55 (FreeBSD) mod_ssl/2.0.55 OpenSSL/0.9.7e DAV/2 PHP/5.1.1 configured -- resuming normal operations


I found this bug report, which details what looks like the same problem:

http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/86416

However, it also mentions that the bug was supposed to be fixed in Apache 2.0.55, 
which I'm running.  As in that bug report, I am also using FreeBSD 5.4.  I added
"LDAPTrustedCAType BASE64_FILE" to my httpd.conf file as suggested, but it makes
no difference.

Ironically, it was working before I upgraded from apache 2.0.54.

Any suggestions are welcome.

Thanks,

Brent





Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20060113025614.GA5073>