Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

I use CentosOS 5.

I have a problem to enable TLS (or ssl) on OpenLDAP server.

I followed this tutorial...


  • I generate the cerificates;
  • I setted the path in sladp.conf
TLSCertificateFile      /path/to/server-certificate.pem

TLSCertificateKeyFile   /path/to/private-key.pem

TLSCACertificateFile    /path/to/CA-certificates

I used the command

slapd -h "ldap:/// ldaps:///"

to enable listner on posrt 636.

I can't create a connection to ldaps :/ / myhost: 636 (I tried to create a connection with a client and liferay ldap)

I haven't problems if I not useTLS

Have I forgot some steps?

///// Edit ////// using the command:

openssl s_client -connect host:port

I obtain

enter image description here

share|improve this question
Use the openssl command to see what exactly goes wrong. Like so: openssl s_client -connect host:port. –  Tim Lamballais Sep 16 '13 at 12:23
Also check using netstat or lsof if your slapd is really listening on 636. –  vautee Sep 16 '13 at 12:25

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.