Hello All,

I was wondering what you all thought about this problem I have
encountered.

All the googling and open information suggests that loading a
certificate into openldap in an ldif file should be in PEM format.

However my ldif looks like this:

userCertificate;binary:< file:///home/vchevalier/myCA/vchevalier.crt

But the only way I can get this certificate to load into the ldap server
is to do the following.

openssl x509 -inform PEM -in vchevalier.crt -outform DER -out
vchevalier.der

Then I change my ldif section to

userCertificate;binary:< file:///home/vchevalier/myCA/vchevalier.der

And it magically works.

Now forgive my ignorance as I am new to ldap, but this is DER format,
NO?

So when polling an LDAP server should I be load certificates from LDAP
into a DER or PEM structure as it appears that openldap loads only DER
and all the google information is wrong!

What gives!

Thanks,
-Victor
______________________________________________________________________
OpenSSL Project                                 http://www.openssl.org
User Support Mailing List                    openssl-users@openssl.org
Automated List Manager                           [EMAIL PROTECTED]

Reply via email to