apache2.0.55 w/ mod_ldap & tls

Brent Kearney brent at kearneys.ca
Thu Jan 12 18:54:48 PST 2006


Hello,

I'm having some trouble getting apache's ldap module to connect to my openldap server 
using TLS.  The reason it won't initiate an SSL connection is evident in the logs:

[Thu Jan 12 20:45:49 2006] [debug] util_ldap.c(1341): LDAP: SSL trusted certificate authority file type - BASE64_FILE
[Thu Jan 12 20:45:49 2006] [notice] SIGHUP received.  Attempting to restart
[Thu Jan 12 20:45:50 2006] [debug] util_ldap.c(1341): LDAP: SSL trusted certificate authority file type - BASE64_FILE
[Thu Jan 12 20:45:51 2006] [notice] Digest: generating secret for digest authentication ...
[Thu Jan 12 20:45:51 2006] [notice] Digest: done
[Thu Jan 12 20:45:51 2006] [notice] LDAP: Built with OpenLDAP LDAP SDK
[Thu Jan 12 20:45:51 2006] [notice] LDAP: SSL support unavailable
[Thu Jan 12 20:45:51 2006] [notice] Apache/2.0.55 (FreeBSD) mod_ssl/2.0.55 OpenSSL/0.9.7e DAV/2 PHP/5.1.1 configured -- resuming normal operations


I found this bug report, which details what looks like the same problem:

http://www.freebsd.org/cgi/query-pr.cgi?pr=ports/86416

However, it also mentions that the bug was supposed to be fixed in Apache 2.0.55, 
which I'm running.  As in that bug report, I am also using FreeBSD 5.4.  I added
"LDAPTrustedCAType BASE64_FILE" to my httpd.conf file as suggested, but it makes
no difference.

Ironically, it was working before I upgraded from apache 2.0.54.

Any suggestions are welcome.

Thanks,

Brent




More information about the freebsd-questions mailing list