Sounds like you're on the right track with the server. But I see no note of using ldap.conf or .ldaprc to set TLS_CACERT directive for your client. See ldap.conf(5).
- Re: TLS fails Aaron Richton
- Re: TLS fails Jon Roberts
- RE: TLS fails Chip Burke
- RE: TLS fails Kurt D. Zeilenga
- Re: TLS fails Jon Roberts
- Re: TLS fails Pierangelo Masarati
- RE: TLS fails Ran Li
- Re: TLS fails Quanah Gibson-Mount
- Re: TLS fails Jon Roberts
- Re: TLS fails Quanah Gibson-Mount
- Re: TLS fails Kurt D. Zeilenga
