I run a bunch of servers, some run Ubuntu 12.04, and some run Centos 6.3 . Recently, the self-signed SSL certificate on my ldap server expired, so I generated a new one, and distributed it to all the Apache2 servers that need it to connect to the ldap server to run authentication. All of the Apache 2 servers running on Ubuntu worked fine, drop in the new cert and everything is happy. On Centos however, everything is still failing with the new cert. If I switch to using unencrypted ldap, they work again.
I've done a ton of research on this, and I've found these items which exactly describe my situation:
https://issues.apache.org/bugzilla/show_bug.cgi?id=50630
can't figure out why apache LDAP auth fails
Sadly, I've tried adding the "LDAPVerifyServerCert Off" to my config, and that has not helped. Any other suggestions would be appreciated.
EDIT 1: I've done some more digging and I've found a lot of talk about recent Centos ldap packages being build against NSS instead of OpenSSL, and that casing problems. One example: http://www.openldap.org/lists/openldap-technical/201303/msg00162.html
So, meta-question, has anyone run down this path to solve SSL-related problems? Did it succeed?