1

Topic: ldap tls can't work

==== Required information ====
- iRedMail version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Linux/BSD distribution name and version:
- Related log if you're reporting an issue:
======== Required information ====
- iRedMail version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Linux/BSD distribution name and version:
- Related log if you're reporting an issue:
======== Required information ====
- iRedMail version:
- Store mail accounts in which backend (LDAP/MySQL/PGSQL):
- Linux/BSD distribution name and version:
- Related log if you're reporting an issue:
======== Required information ====
- iRedMail version: 0.8.3
- Store mail accounts in which backend (LDAP/MySQL/PGSQL): LDAP
- Linux/BSD distribution name and version: centos6.3
- Related log if you're reporting an issue:
====

hi ,
I use some open software to connect to my iredmail ldap, it can't work if  i choose ssl or tls, i think that's a problem whit the domain CertificateFile, but it's https works well,
i setup cert like this:
1, My boss buy domain ssl cert from godday.com
2 root@mail postfix]# grep iRedMail /etc/httpd/conf.d/ssl.conf
SSLCertificateFile /etc/pki/tls/certs/iRedMail_CA.pem
SSLCertificateKeyFile /etc/pki/tls/private/iRedMail.key

3   cat test.com.crt > iRedMail_CA.pem
cat test.com.key > iRedMail.key

Post's attachments

ldap-tls1.jpg
ldap-tls1.jpg 52.53 kb, file has never been downloaded. 

ldap-tls2.jpg
ldap-tls2.jpg 58.85 kb, file has never been downloaded. 

You don't have the permssions to download the attachments of this post.

----

Spider Email Archiver: On-Premises, lightweight email archiving software developed by iRedMail team. Supports Amazon S3 compatible storage and custom branding.

2

Re: ldap tls can't work

our domain https works well, but i search google ,  (The -nodes argument above prevents encryption of the private key. OpenLDAP only works with unencrypted private keys.) Then use your CA to sign this cert request:
  CA.sh -sign
节点上述论点防止加密的私钥。OpenLDAP的只适用于未加密的私钥)。然后使用您的CA签署这个证书要求:

3

Re: ldap tls can't work

test:
ldapsearch -h localhost -ZZ -LLL -x -D "cn=manager,dc=iredmail,dc=org"  -w PASSWORD  -b "o=domains,dc=iredmail,dc=org"

ldap_start_tls: Connect error (-11)
        additional info: TLS error -8179:Peer's Certificate issuer is not recognized.