Re: How to verify server certificate

2009-08-05 Thread Fredrik Melander
Hi again, > Why should it be broken? It's deliberately broken to test the program, and thanks to your reply I've been able to catch this exception: CONNECT_ERROR: {'info': 'TLS: hostname does not match CN in peer certificate', 'desc': 'Connect error'} What I've so far *not* been able to provoke

Re: How to verify server certificate

2009-08-04 Thread Michael Ströder
Fredrik Melander wrote: > Michael Ströder schrieb: >> Fredrik Melander wrote: >>> Short question: when negotiating TLS with the LDAP server with >>> start_tls_s(), can I use python-ldap to follow the certificate chain and >>> verify the server certificate? If so, how? >> The OpenLDAP libs are doi

Re: How to verify server certificate

2009-08-04 Thread Fredrik Melander
Michael Ströder schrieb: > Fredrik Melander wrote: >> Short question: when negotiating TLS with the LDAP server with >> start_tls_s(), can I use python-ldap to follow the certificate chain and >> verify the server certificate? If so, how? > > The OpenLDAP libs are doing that for you (with the he

Re: How to verify server certificate

2009-08-04 Thread Michael Ströder
Fredrik Melander wrote: > Short question: when negotiating TLS with the LDAP server with > start_tls_s(), can I use python-ldap to follow the certificate chain and > verify the server certificate? If so, how? The OpenLDAP libs are doing that for you (with the help of an underlying lib like OpenS

How to verify server certificate

2009-08-04 Thread Fredrik Melander
Hi, list! Short question: when negotiating TLS with the LDAP server with start_tls_s(), can I use python-ldap to follow the certificate chain and verify the server certificate? If so, how? Best regards, Fredrik smime.p7s Description: S/MIME Cryptographic Signature -