[Kroupware] TLS Certificates

[Dieter Kluenter]

Hi,
 I just wonder which options are used to generate TLS
 certificates. When testing the TLS ability of slapd I get

-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.
marin:/kolab/bin # ./openssl s_client -connect localhost:389 -showcerts -debug
CONNECTED(00000003)
write to 0816B400 [0816BAC0] (142 bytes => 142 (0x8E))
0000 - 80 8c 01 03 01 00 63 00-00 00 20 00 00 39 00 00   ......c... ..9..
0010 - 38 00 00 35 00 00 16 00-00 13 00 00 0a 07 00 c0   8..5............
0020 - 00 00 33 00 00 32 00 00-2f 03 00 80 00 00 66 00   ..3..2../.....f.
0030 - 00 05 00 00 04 01 00 80-08 00 80 00 00 63 00 00   .............c..
0040 - 62 00 00 61 00 00 15 00-00 12 00 00 09 06 00 40   b..a...........@
0050 - 00 00 65 00 00 64 00 00-60 00 00 14 00 00 11 00   ..e..d..`.......
0060 - 00 08 00 00 06 04 00 80-00 00 03 02 00 80 e3 74   ...............t
0070 - 92 06 fb 7e c2 3e a5 fb-3f cf e6 0c 60 aa bd 6b   ...~.>..?...`..k
0080 - 03 19 b7 77 c4 59 d4 10-64 3b 81 1e 1f 50         ...w.Y..d;...P
read from 0816B400 [08171020] (7 bytes => 0 (0x0))
6365:error:140790E5:SSL routines:SSL23_WRITE:ssl handshake failure:s23_lib.c:226:
-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.-.

-Dieter

-- 
Dieter Kluenter  | Systemberatung
Tel:040.64861967 | Fax: 040.64891521
mailto: dkluenter at schevolution.com
http://www.schevolution.com/tour