LDAPS trust Certificate

allinformatix

Dear Community,
I hope I am not bothering you with my question. Sadly I could not find an answer for my situation. Therefore I am opening a new thread.
I have an LDAP Server which is listening on both LDAP & LDAPS. I am now trying to increase the security level and I could’nt manage Kopano to connect to my server via LDAPS. I have a SelfSigned Certificate and I exported the Public part of the Cert into Cert Store of Ubuntu and Updated it. But Kopano is not able to Connect. Can anyone help me?

Thanks in advanced!

Best Regards
Fehmi

AnotherAndy

Hi,
did you also put the “CA” into your trusted store? - or just the certificate?
br

allinformatix

I Just put the public part of the SelfSigned Cert into the trusted store of the OS.

AnotherAndy

I suggest to put the CA Certificate also in the trust store. I think you made an dpkg-reconfigure ca-certificates, right?
Are there any error messages?

allinformatix

@AnotherAndy
Now I managed to get it run. I did a misstake on the CSR (Certificate Signing Request). The CN should be the hostname (or DNS) of the LDAP Server. I already imported my root Certificate with this command:

sudo cp /tmp/myCA.crt /usr/local/share/ca-certificates/
sudo update-ca-certificates

But thank you for your help. Ticket Closed ;-)