Re: SSL for Ldap -- implementation help

[email protected] wrote:
> Hi ,
> 
> I am trying to use SSL for Ldap. I downloaded the required Mozilla C
> SDK and the NSPR & NSS binaries.
> I tried running executing the sample that came with the SDK. The
> program terminates when it encounters the ldapssl_client_init() /
> ladpssl_clientauth_init() functons.
> 
> I have the cert7.db & key3.db path provided, but the function always
> returns a  -1 . and terminates.

Can you provide a code excerpt that shows your usage of these functions, 
and the exact strings/arguments you pass to them?

> 
> I am not sure where i am going wrong ? Is it because of the certs that
> i am using being corrupted? or am i having incorrect libraries.

You can use the certutil command provided with NSS to view your certs.

> 
> 1)The documentation says that libldap50.so /libldap60.so (I am using
> linux ) comes with the required ssl enabled functions. Do i still need
> NSPR & NSS. Is there a dependency ?

What OS are you using?  In order to use SSL/TLS, you must use NSS, which 
also requires NSPR.  So yes, you need NSPR and NSS to do SSL/TLS.

> 
> 2) I tried giving the entire path to the cert and just the directory.
> Both options did not work out.
> 
> 3) I am using mozilla c SDK 5.17 . Do i have to use the latest
> version ?

You should not have to use the latest, but that is strongly recommended. 
  It's much easier for us to support the latest version.

> 
> Any help is greatly appreciated. I do not have much debugging info
> since the ldapssl_client_init() is the first function and once that
> fails, no more info to debug the cause for failure.
>