Aleksander Adamowski wrote:
Michael Ströder wrote:
> Aleksander Adamowski wrote:
>>
>> The relevant fields of the OpenLDAP server's certificate are:
>
> What about the keyUsage and extendedKeyUsage extensions?
>
These aren't present, unfortunately.
IIRC they have to be defined.
Example lines for openssl.cnf:
keyUsage = digitalSignature,keyEncipherment
extendedKeyUsage = serverAuth
Ciao, Michael.