I have two OpenLDAPs configured. The first one on machine A acts as proxy for the second one on machine B using the ldap backend.
Now I enabled TLS and client authentication for the LDAP on machine B allowing only clients certified by the CA certificates from the smart card.
I compiled the openldap (version 2.4.28) on machine A to use OpenSSL instead of GNUTLS and managed to establish a connection with the OpenSSL pkcs11 engine to the LDAP on machine B using OpenSSL s_client.
I know the LDAP proxy on machine A acts as ldap client and thus the TLS_CERT and TLS_KEY configuration options should be adjusted.
Is it possible to tell the LDAP on machine A to use the key from the smartcard (e.g. something like pkcs11:slot_1-id_462) ?