Comment 6 for bug 242313

Ack, I'm glad I'm not the only one to encounter this. I was pulling my hair out thinking it was a problem with my configuration, but couldn't figure out what it could be, since I don't have this problem in Dapper. It just seems to be an issue in Hardy.

If it helps any, I encountered this problem at first through python-ldap. I explicitly set TLS_CACERTDIR to '/etc/ssl/certs' and then call start_tls_s(). This causes a rather unhelpful CONNECT_ERROR exception to be raised. Attached is a Python command line session demonstrating the problem.

When I set TLS_CACERTDIR in my ldap.conf and try using ldapsearch I get the same errors. If I specify a specific certificate file with TLS_CACERT then there's no problem. Likewise in Python.