Oh sure, just the way it was worded I wasn't sure if you were seeing
successful SSL connections or just "lots of SSL traffic", which can still
be handshake failures.
Can you successfully perform ldapsearches from serverb to serverc over 636?
On Sun, May 4, 2014 at 10:33 AM, Graham Leggett <minfrin(a)sharp.fm> wrote:
On 04 May 2014, at 7:26 PM, Dustin Rice <dustin(a)pdx.edu>
wrote:
My guess would be it's failing to validate the SSL certificate. Are you
using a self-signed cert? If so, you'll need to import that CA cert across
all of your servers.
As I said below, ssldump reveals that the servers are talking successfully
to one another, revealing a completely successful SSL handshake. Self
signed certs are not being used:
At the same time, ssldump reveals that
serverb.example.com and
>
serverc.example.com are successfully speaking to one another, and have a
> lot to say - data seems to be constantly flowing between them, but not to
> any successful end.
>
Regards,
Graham
--
--
389 users mailing list
389-users(a)lists.fedoraproject.org
https://admin.fedoraproject.org/mailman/listinfo/389-users