I run a bunch of servers, some run Ubuntu 12.04, and some run Centos 6.3 . Recently, the self-signed SSL certificate on my ldap server expired, so I generated a new one, and distributed it to all the Apache2 servers that need it to connect to the ldap server to run authentication. All of the Apache 2 servers running on Ubuntu worked fine, drop in the new cert and everything is happy. On Centos however, everything is still failing with the new cert. If I switch to using unencrypted ldap, they work again.
I've done a ton of research on this, and I've found these items which exactly describe my situation:
Sadly, I've tried adding the "LDAPVerifyServerCert Off" to my config, and that has not helped. Any other suggestions would be appreciated.
EDIT 1: I've done some more digging and I've found a lot of talk about recent Centos ldap packages being build against NSS instead of OpenSSL, and that casing problems. One example: http://www.openldap.org/lists/openldap-technical/201303/msg00162.html
So, meta-question, has anyone run down this path to solve SSL-related problems? Did it succeed?