Re: How to force openldap to use TLSv1?

huican <[email protected]> Wed, 17 Feb 2010 13:52:51 -0800 (PST)

Newsgroups	gmane.comp.mozilla.devel.directory
Organization	http://groups.google.com
Message-ID	<1bad90e7-1c37-48f1-ae14-21f4bf93cc7e@m27g2000prl.googlegroups.com>

On Feb 17, 2:12 pm, huican <[email protected]> wrote:
> Hello,
>
> A dummy question..
>
> Can I force the openldap to use the TLSv1 when doing SSL connection?
>
> I tried to add the line such as: TLSCipherSuite TLSv1+RSA in
> slapd.conf (and also tried to add it on ldap.conf for ldapsearch), but
> it doesn't take effect, and it seems always use the SSLv3?
>
> ....
> TLS trace: SSL_accept:SSLv3 read client hello A
> TLS trace: SSL_accept:SSLv3 write server hello A
> TLS trace: SSL_accept:SSLv3 write certificate A
> TLS trace: SSL_accept:SSLv3 write server done A
>
> Anywhere else I should config it?

I am using openldap 2.2.5, probably it is a little bit out-of-dated.