Ubuntu
openldap package

  1. Bug #217159
  2. Comment #19

Comment 19 for bug 217159

Revision history for this message
elvis (elvisa) wrote :

Unfortunately I've decommissioned the machine. However I do know that I didn't manually specify any TLSCipherSuite directives in the slapd.conf.

The hardy slapd.conf man (5) file still references the TLSCipherSuite format accepted by OpenSSL (e.g.: "TLSCipherSuite HIGH:MEDIUM:+SSLv2"), which caused slapd to fail in start as GnuTLS doesn't support this format. As such I removed the directive (allowing all ciphers supported by GnuTLS) which would allow slapd to start.

Similarly my ldap.conf didn't specify any cipher suite, and the gnutls-cli testing above didn't either.

If I get time I will attempt to rebuild and retest from where I left off.