1. A self signed certificate can be generated using:
$ openssl req -newkey rsa:1024 -x509 -nodes -out server.pem -keyout server.pem -days 3650
It is used for testing ldap_start_tls(), which also requires "TLS_REQCERT never" in client configuration
- 2. An empty LDAP structure is required for the tests to be PASSed
+ 2. An empty LDAP structure is required for the tests to be PASSed (except for base and admin)
+
+ If you use a debian based distribution, prefer the use of dpkg-reconfigure.
+ Otherwise you may alter these configuration files:
-(/etc/openldap/)slapd.conf:
+ (/etc/openldap/)slapd.conf:
-----------------------------------------------------------
TLSCACertificateFile /etc/openldap/ssl/server.pem
TLSCertificateFile /etc/openldap/ssl/server.pem