RE: FW: Net::LDAPS and verifying the CA certificate

[Christian G. <cgi...@ti...>]

> What is in the 'die' message?

IO::Socket::SSL: Timeout  ...propagated at ./test_ldaps.pl line 61.

> Since you only usually want to set one of cafile or capath, I
> think you
> have to simply set the other one to an empty string. (It
> looks like you're
> using capath, so set cafile to '')

Just tried that. Same result.

> Are you connecting to the right host, ie bluepages.ibm.com? I can't
> remember if OpenSSL checks that itself.

Yes. Here's my connect line:

  my $ldap = Net::LDAPS->new('bluepages.ibm.com',
                             port => 636,
                             verify => 'require',
                             capath =>
'/opt/apache/w3-dev.tivoli.com/443/conf/ssl.crt',
                             cafile => '',
                             debug => 15,
                             onerror => 'die')
    or die;

> Otherwise, can you try and make sure that there's no
> underlying OpenSSL
> problem?

I'm having trouble with openssl verifying the cert. I'll dig deeper on
this front.

Thanks,
Christian