From: Goucher, A. <ada...@hp...> - 2004-01-05 22:02:30
|
> Just guessing since you did not mention what "is hanging"=20 > means and you did=20 > not provide a Python traceback: You have to tell where to=20 > find the CA's=20 > certificate by calling >=20 > ldap.set_option(ldap.OPT_X_TLS_CACERTFILE,path_to_cacert_file) or=20 > ldap.set_option(ldap.OPT_X_TLS_CACERTDIR,path_of_cacert_dir). Using openssl's s_client it shows that the connection is doing TLS 1.0. = Consequently, I tried to do exactly as is suggested and received the = following. Traceback (most recent call last): File "c:\temp\ads.py", line 3, in ? ldap.set_option(ldap.OPT_X_TLS_CACERTFILE, "c:\temp\unicert.cer") File "C:\Python23\Lib\site-packages\ldap\functions.py", line 104, in = set_option _ldap_function_call(_ldap.set_option,option,invalue) File "C:\Python23\Lib\site-packages\ldap\__init__.py", line 62, in = _ldap_function_call result =3D apply(func,args,kwargs) ldap.LDAPError: {'errnum': -1} And the cert itself is pem encoded. -adam |