I had two OpenLDAP (a master and a consumer). The master is on Red Hat 6 and consumer was on Red Hat 5. Everything worked well until I upgrade the consumer in Red Hat 6.
The sync between the two works well.
ldapsearch -H ldap://consumer and
ldapsearch -H ldap://master work.
ldapsearch -H ldaps://master works, but
ldapsearch -H ldaps://consumer hang forever and slapd on the consumer uses 100% of one CPU.
The config is exactely the same between the consumer and the master.
They also have the same slapdkey.pem and slapdcert.pem (I check the md5sum).
I tried to generate a certificat from the consumer but the problem was the same.
When I try
openssl s_client -connect localhost:636 | openssl x509 -text on the consumer, same result. On the master it shows me the certificat and everything.
ldap and ldaps is running, and port 636 is open.
Any ideas ?