Solved [Solved] OpenLDAP: Is server certificate used by client?

I have installed and configured OpenLDAP (2.4.38) on a server (FreeBSD 9.2).

I've created the following certificates:

  • ca.cert - CA, self-assigned
    server.cert - certificate for the LDAP server

Now, on another machine (FreeBSD 9.2), the client, I have configured the OpenLDAP client to use my CA certificate only, but not the server certificate, and it still works.
Don't I need to use the server.crt on the client as well?
 
Re: OpenLDAP: Is server certificate used by client?

It's the CA Certificate which is required by the client. That's what you add in ldap.conf via TLS_CACERT.
 
Back
Top