<div dir="ltr">Greetings,<div><br></div><div>I included the full "ssl_opts" portion in the config, and it spun up just fine (cacertfile, certfile, keyfile, verify, etc.). Without the ssl_opts, I wasn't getting SSL to connect.</div>
<div><br></div><div>-rsb</div><div><br></div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Mon, May 12, 2014 at 1:59 PM, Mark Soderquist <span dir="ltr"><<a href="mailto:SoderquistMV@ldschurch.org" target="_blank">SoderquistMV@ldschurch.org</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div lang="EN-US" link="#0563C1" vlink="#954F72">
<div>
<p class="MsoNormal">I’m attempting to connect to our LDAP server over SSL instead of plain sockets. The plain socket configuration works but simply enabling the use_ssl flag and changing the port does not appear to be enough. What else is required to connect
to an LDAP server using SSL?<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Here is my configuration:<u></u><u></u></p>
<p class="MsoNormal"> {rabbitmq_auth_backend_ldap,<u></u><u></u></p>
<p class="MsoNormal"> [ {servers, ["<a href="http://ldschurch.org" target="_blank">ldschurch.org</a>"]},<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"> %% Options removed for security<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"> {use_ssl, true},<u></u><u></u></p>
<p class="MsoNormal"> {port, 636},<u></u><u></u></p>
<p class="MsoNormal"> {log, true}<u></u><u></u></p>
<p class="MsoNormal"> ]<u></u><u></u></p>
<p class="MsoNormal"> }<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">The log simply reports a connection failure:<u></u><u></u></p>
<p class="MsoNormal">=INFO REPORT==== 12-May-2014::14:28:41 ===<u></u><u></u></p>
<p class="MsoNormal"> LDAP connect error: {error,"connect failed"}<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I do not expect to need to create a certificate since my LDAP server does not do client certificate verification. What am I missing?<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Mark<u></u><u></u></p>
</div>
<div>
<p class="MsoNormal"><span><font color="#666666"><br><br> NOTICE: This email message is for the sole use of the intended recipient(s) and may contain confidential and privileged information. Any unauthorized review, use, disclosure or distribution is prohibited. If you are not the intended recipient, please contact the sender by reply email and destroy all copies of the original message.</font></span><u></u><u></u></p>
<br>
</div></div>
<br>_______________________________________________<br>
rabbitmq-discuss mailing list<br>
<a href="mailto:rabbitmq-discuss@lists.rabbitmq.com">rabbitmq-discuss@lists.rabbitmq.com</a><br>
<a href="https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss" target="_blank">https://lists.rabbitmq.com/cgi-bin/mailman/listinfo/rabbitmq-discuss</a><br>
<br></blockquote></div><br></div>