Take the 2-minute tour ×

I'm trying to set up LDAP client access using TLS. I've added the certificates of my CA and both gnutls and openssl connect just fine to the LDAP server. When I try ldapsearch though it still says TLS: peer cert untrusted or revoked

As said: connecting with gnutls-cli results in Peer's certificate is trusted. I've set tls_cacertfile /etc/ssl/certs/ca-certificates in my LDAP configuration and this is the same cacert file I use when I tried connecting with gnutls-cli and openssl.

This rules out any source of error I've found on this topic so far

Where can I go from here?


edit: gnutls version is 2.8.6

share|improve this question
add comment

1 Answer

up vote 0 down vote accepted

derp Just came along something by chance... the correct configuration directive is tls_cacert and not tls_cacertfile as the default config file indicates

share|improve this answer
add comment

Your Answer


