Hi Eric,
Thanks for response. I can't find documentation on how to disable verification of the cert nor how to switch to TLS 1.2.
Do you happen to know how to do that ?
Thanks in advance.
On Fri, Mar 17, 2017 at 3:02 PM, Erik LE VACON erik@levacon.net wrote:
Hello Vlad,
Seems you're using a self-signed cert, and the strict mode seems to be enabled (requesting an official CA to validate your cert).
In //, you're using TLS 1.0 and maybe you should consider switching to 1.2.
Good luck
Best,
E.
Le 17/03/2017 à 19:33, Vlad Kratsberg a écrit :
Hello,
We are trying to enable TLS on top of ldap connections. Once, i change startls to FALSE or required
$config['auth_ldap_starttls'] = TRUE; $config['auth_ldap_starttls'] = 'required';
I get the following message:
[image: Inline image 1] What does it mean exactly ? Version mismatch ? Cert error ?
When I check packet capture, i see the following:
[image: Inline image 2]
And inside the client response ( packet # 9 ), there is this:
[image: Inline image 3]
Does it mean that observium can't find a certificate ? If so, which directory should i place certs ? I have another app on the same box that is using ldap with tls and it is working just fine.
Also, what TLS versions are supported by observium ?
Has anybody experienced the same issue ? Were you able to resolve it ?
Appreciate your responses.
Thank you
observium mailing listobservium@observium.orghttp://postman.memetic.org/cgi-bin/mailman/listinfo/observium
observium mailing list observium@observium.org http://postman.memetic.org/cgi-bin/mailman/listinfo/observium
