通过SSL配置LDAP时出错：TLS证书验证：错误

发布于 2025-01-29 09:20:46 字数 1070 浏览 2 评论 0原文

我正在为SSL/TLS配置OpenLDAP。我需要在端口上配置LDAP，例如636。我已经准备了诸如ldaptls_cacert =“/etc/openldap/cacerts/ca.cert.pem”之类的配置。但是，在与服务器连接时，我面对“ TLS证书验证：错误” 。我正在使用下面的ldapsearch命令来检查连接：

env ldaptls_cacert =“/etc/etp/openldap/cacerts/ca.cert.pem” ldapsearch -h ldaps：//192.168.1.xxx：636 -zz -z -d 1 -b“ ou = myteam，ou = people，dc = geekforgeek，dc = local“ -d” cn = ldaploger，ou = ldaploger，dc = geekforgeek，dc = local“ -s base”（＆amp; ）（objectClass = eperson））”

以下错误，我因此得出：

TLS trace: SSL3 alert write:fatal:unknown CA
TLS trace: SSL_connect:error in error
TLS trace: SSL_connect:error in error
TLS: can't connect: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed (self signed certificate in certificate chain).
ldap_err2string
ldap_start_tls: Can't contact LDAP server (-1)
        additional info: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed (self signed certificate in certificate chain)```

Any input on why this error occurs! Please suggest.

原文

I am configuring OPENLDAP for SSL/TLS. I need to configure ldap for secure connection on port like 636.
I have already prepared configurations like LDAPTLS_CACERT="/etc/openldap/cacerts/ca.cert.pem". However while connecting with the server, I am facing below "TLS certificate verification: Error".
I am using below ldapsearch command to check the connection :

env LDAPTLS_CACERT="/etc/openldap/cacerts/ca.cert.pem" ldapsearch -H ldaps://192.168.1.XXX:636 -ZZ -d 1 -b "ou=MyTeam,ou=People,dc=geekforgeek,dc=local" -D "cn=ldapLoger,ou=LdapLoger,dc=geekforgeek,dc=local" -s base "(&(emailAddress=%v)(objectclass=ePerson))"

Following error i am getting as a result :

TLS trace: SSL3 alert write:fatal:unknown CA
TLS trace: SSL_connect:error in error
TLS trace: SSL_connect:error in error
TLS: can't connect: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed (self signed certificate in certificate chain).
ldap_err2string
ldap_start_tls: Can't contact LDAP server (-1)
        additional info: error:14090086:SSL routines:ssl3_get_server_certificate:certificate verify failed (self signed certificate in certificate chain)```

Any input on why this error occurs! Please suggest.

分享到QQ

分享到微博