rosa:/etc/ldap# cat ~/.ldaprc SASL_MECH EXTERNAL TLS_CERT /etc/ldap/server-cert.pem TLS_KEY /etc/ldap/server-key.pem rosa:/etc/ldap# openssl x509 -text -in /etc/ldap/server-cert.pem Certificate: Data: Version: 3 (0x2) Serial Number: 9e:a2:10:a2:26:11:f7:4b Signature Algorithm: sha1WithRSAEncryption Issuer: CN=rosa.kuiki.net Validity Not Before: Dec 31 12:20:23 2006 GMT Not After : Dec 28 12:20:23 2016 GMT Subject: CN=rosa.kuiki.net Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public Key: (1024 bit) Modulus (1024 bit): 00:c8:4f:0c:b7:64:f4:56:60:46:28:90:3e:2f:de: 3e:c0:c2:b0:11:c1:3a:06:06:33:af:ca:c5:ca:9a: e6:01:54:78:5d:3f:c9:bb:06:f3:a5:15:d3:c8:27: 2a:9d:8c:0e:5b:28:8e:3d:1f:d9:70:23:62:37:d6: 0d:af:6b:a3:22:75:9e:fd:60:3f:a8:53:c1:eb:27: e0:33:13:e8:83:a5:94:bf:82:45:82:a0:8d:9b:5c: d6:e4:f5:74:64:b5:e0:b9:00:35:a7:0b:21:8e:e0: 05:ca:03:72:f0:23:94:37:f6:6e:43:43:32:73:6d: d0:34:8b:5b:99:42:38:3d:9b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: A9:65:CF:BA:5D:61:9C:71:13:24:BF:C5:14:94:AD:31:B4:46:15:47 X509v3 Authority Key Identifier: keyid:A9:65:CF:BA:5D:61:9C:71:13:24:BF:C5:14:94:AD:31:B4:46:15:47 DirName:/CN=rosa.kuiki.net serial:9E:A2:10:A2:26:11:F7:4B X509v3 Basic Constraints: CA:TRUE Signature Algorithm: sha1WithRSAEncryption 13:b0:2b:5c:af:56:84:c0:fd:be:98:7c:73:f9:b8:84:82:b6: 6b:9a:42:ac:b4:1b:0b:17:26:30:07:ba:9b:47:4c:3a:ea:ac: f1:c2:ab:20:ec:54:cf:1e:35:89:f7:4a:a9:83:9f:d4:a4:37: 5a:0b:65:99:34:c1:69:d3:85:fb:f0:c6:32:23:16:64:cc:5c: ab:57:af:22:7a:a9:10:86:00:c8:ca:af:3d:8c:9e:09:f4:0a: 3d:d2:18:f2:db:be:4f:67:6e:03:35:1b:29:58:8d:b7:a7:35: e4:6a:11:af:db:0e:de:d4:63:b4:b5:05:2d:86:ce:bb:f8:33: 2c:b8 -----BEGIN CERTIFICATE----- MIICKjCCAZOgAwIBAgIJAJ6iEKImEfdLMA0GCSqGSIb3DQEBBQUAMBkxFzAVBgNV BAMTDnJvc2Eua3Vpa2kubmV0MB4XDTA2MTIzMTEyMjAyM1oXDTE2MTIyODEyMjAy M1owGTEXMBUGA1UEAxMOcm9zYS5rdWlraS5uZXQwgZ8wDQYJKoZIhvcNAQEBBQAD gY0AMIGJAoGBAMhPDLdk9FZgRiiQPi/ePsDCsBHBOgYGM6/Kxcqa5gFUeF0/ybsG 86UV08gnKp2MDlsojj0f2XAjYjfWDa9royJ1nv1gP6hTwesn4DMT6IOllL+CRYKg jZtc1uT1dGS14LkANacLIY7gBcoDcvAjlDf2bkNDMnNt0DSLW5lCOD2bAgMBAAGj ejB4MB0GA1UdDgQWBBSpZc+6XWGccRMkv8UUlK0xtEYVRzBJBgNVHSMEQjBAgBSp Zc+6XWGccRMkv8UUlK0xtEYVR6EdpBswGTEXMBUGA1UEAxMOcm9zYS5rdWlraS5u ZXSCCQCeohCiJhH3SzAMBgNVHRMEBTADAQH/MA0GCSqGSIb3DQEBBQUAA4GBABOw K1yvVoTA/b6YfHP5uISCtmuaQqy0GwsXJjAHuptHTDrqrPHCqyDsVM8eNYn3SqmD n9SkN1oLZZk0wWnThfvwxjIjFmTMXKtXryJ6qRCGAMjKrz2Mngn0Cj3SGPLbvk9n bgM1GylYjbenNeRqEa/bDt7UY7S1BS2Gzrv4Myy4 -----END CERTIFICATE----- rosa:/etc/ldap# ldapwhoami -vv -d -1 -H ldaps://shego.kuiki.net/ ldap_url_parse_ext(ldaps://shego.kuiki.net/) ldap_initialize( ldaps://shego.kuiki.net:636/??base ) ldap_create ldap_url_parse_ext(ldaps://shego.kuiki.net:636/??base) ldap_sasl_interactive_bind_s: user selected: EXTERNAL ldap_int_sasl_bind: EXTERNAL ldap_new_connection 1 1 0 ldap_int_open_connection ldap_connect_to_host: TCP shego.kuiki.net:636 ldap_new_socket: 3 ldap_prepare_socket: 3 ldap_connect_to_host: Trying 207.7.148.208:636 ldap_pvt_connect: fd: 3 tm: -1 async: 0 tls_write: want=82, written=82 0000: 16 03 02 00 4d 01 00 00 49 03 02 47 9e ff 6e 29 ....M...I..G..n) 0010: 4f f1 88 42 08 2e 0e 7d 65 09 19 74 36 23 c6 5c O..B...}e..t6#.\ 0020: 5d 99 15 b2 dd 49 72 f4 88 89 98 00 00 18 00 39 ]....Ir........9 0030: 00 33 00 16 00 38 00 32 00 13 00 66 00 35 00 2f .3...8.2...f.5./ 0040: 00 0a 00 05 00 04 02 01 00 00 07 00 09 00 03 02 ................ 0050: 00 01 .. tls_read: want=5, got=5 0000: 16 03 01 00 4a ....J tls_read: want=74, got=74 0000: 02 00 00 46 03 01 47 9e ff 85 6a 34 33 a6 69 8c ...F..G...j43.i. 0010: b2 ca 82 f9 0a 9b ba 07 72 fe 5e b1 97 95 b9 77 ........r.^....w 0020: 33 76 8a 0d 24 80 20 c7 fb 95 dd dc 8e 8d f5 78 3v..$. ........x 0030: 18 d3 21 aa 42 fb 8c a7 f6 f8 42 56 bf 6f b4 70 ..!.B.....BV.o.p 0040: 91 8c 7c 6c 16 24 ec 00 35 01 ..|l.$..5. tls_read: want=5, got=5 0000: 16 03 01 02 3b ....; tls_read: want=571, got=571 0000: 0b 00 02 37 00 02 34 00 02 31 30 82 02 2d 30 82 ...7..4..10..-0. 0010: 01 96 a0 03 02 01 02 02 09 00 a0 1e 16 dc 71 a8 ..............q. 0020: a1 25 30 0d 06 09 2a 86 48 86 f7 0d 01 01 05 05 .%0...*.H....... 0030: 00 30 1a 31 18 30 16 06 03 55 04 03 13 0f 73 68 .0.1.0...U....sh 0040: 65 67 6f 2e 6b 75 69 6b 69 2e 6e 65 74 30 1e 17 ego.kuiki.net0.. 0050: 0d 30 37 30 31 30 31 30 32 32 38 34 36 5a 17 0d .070101022846Z.. 0060: 31 36 31 32 32 39 30 32 32 38 34 36 5a 30 1a 31 161229022846Z0.1 0070: 18 30 16 06 03 55 04 03 13 0f 73 68 65 67 6f 2e .0...U....shego. 0080: 6b 75 69 6b 69 2e 6e 65 74 30 81 9f 30 0d 06 09 kuiki.net0..0... 0090: 2a 86 48 86 f7 0d 01 01 01 05 00 03 81 8d 00 30 *.H............0 00a0: 81 89 02 81 81 00 dc 3a 62 dd 7a ed ea a6 4d ce .......:b.z...M. 00b0: 96 a3 a4 33 f8 80 08 06 cf cc 49 7c c9 a7 a3 d0 ...3......I|.... 00c0: 37 f3 10 75 6b 57 f8 03 11 51 91 bd 69 d1 6f c0 7..ukW...Q..i.o. 00d0: 0b 46 bc 56 d1 e3 f9 a5 3e 12 f2 93 68 99 b1 c7 .F.V....>...h... 00e0: 8d 1c 46 8f 81 9a f7 fa 19 3e cd 76 51 6b 12 7b ..F......>.vQk.{ 00f0: 6a e3 dc 0f 5f 69 e2 cb a5 bc 03 63 30 31 b7 67 j..._i.....c01.g 0100: bf f6 c4 1b fe f4 2d 67 fc 58 da b7 bc df 00 86 ......-g.X...... 0110: 20 89 66 82 79 92 16 1e d3 4a f5 94 82 05 b6 1a .f.y....J...... 0120: e9 e7 6b 54 c4 79 02 03 01 00 01 a3 7b 30 79 30 ..kT.y......{0y0 0130: 1d 06 03 55 1d 0e 04 16 04 14 5f 4d 6f f6 f9 c8 ...U......_Mo... 0140: 80 a8 4c 9e c6 88 1e 1d 6b 3f a2 e7 7a b2 30 4a ..L.....k?..z.0J 0150: 06 03 55 1d 23 04 43 30 41 80 14 5f 4d 6f f6 f9 ..U.#.C0A.._Mo.. 0160: c8 80 a8 4c 9e c6 88 1e 1d 6b 3f a2 e7 7a b2 a1 ...L.....k?..z.. 0170: 1e a4 1c 30 1a 31 18 30 16 06 03 55 04 03 13 0f ...0.1.0...U.... 0180: 73 68 65 67 6f 2e 6b 75 69 6b 69 2e 6e 65 74 82 shego.kuiki.net. 0190: 09 00 a0 1e 16 dc 71 a8 a1 25 30 0c 06 03 55 1d ......q..%0...U. 01a0: 13 04 05 30 03 01 01 ff 30 0d 06 09 2a 86 48 86 ...0....0...*.H. 01b0: f7 0d 01 01 05 05 00 03 81 81 00 4b 33 ef 9e b3 ...........K3... 01c0: cd b4 cc 33 8e 75 80 70 8e 3b 85 3a 96 9c 56 ff ...3.u.p.;.:..V. 01d0: d9 0d a9 22 0d 15 d8 f7 4a bf 1b b2 34 a7 dd f9 ..."....J...4... 01e0: c5 e8 c6 c7 3e 5e a4 b2 3b 1e c1 73 25 ef 6c 86 ....>^..;..s%.l. 01f0: 0c 2b 54 68 98 d9 bd 60 fc 3a b5 49 1f 85 bf be .+Th...`.:.I.... 0200: 32 7b eb 7c a7 9b 9d 22 19 8a 06 aa 09 39 c1 63 2{.|...".....9.c 0210: 71 6f 87 82 ad 01 73 ee 7d 6d 67 20 1e 9a 37 f4 qo....s.}mg ..7. 0220: c8 05 96 59 06 6b 22 73 ff e4 c0 33 c1 27 62 83 ...Y.k"s...3.'b. 0230: b8 f2 d9 3e 6c 79 8b 0a 75 8d 00 ...>ly..u.. tls_read: want=5, got=5 0000: 16 03 01 00 4b ....K tls_read: want=75, got=75 0000: 0d 00 00 43 03 01 02 40 00 3d 00 1b 30 19 31 17 ...C...@.=..0.1. 0010: 30 15 06 03 55 04 03 13 0e 72 6f 73 61 2e 6b 75 0...U....rosa.ku 0020: 69 6b 69 2e 6e 65 74 00 1e 30 1c 31 1a 30 18 06 iki.net..0.1.0.. 0030: 03 55 04 03 13 11 73 61 63 68 69 6b 6f 2e 6b 75 .U....sachiko.ku 0040: 69 6b 69 2e 6e 65 74 0e 00 00 00 iki.net.... tls_write: want=573, written=573 0000: 16 03 01 02 38 0b 00 02 34 00 02 31 00 02 2e 30 ....8...4..1...0 0010: 82 02 2a 30 82 01 93 a0 03 02 01 02 02 09 00 9e ..*0............ 0020: a2 10 a2 26 11 f7 4b 30 0d 06 09 2a 86 48 86 f7 ...&..K0...*.H.. 0030: 0d 01 01 05 05 00 30 19 31 17 30 15 06 03 55 04 ......0.1.0...U. 0040: 03 13 0e 72 6f 73 61 2e 6b 75 69 6b 69 2e 6e 65 ...rosa.kuiki.ne 0050: 74 30 1e 17 0d 30 36 31 32 33 31 31 32 32 30 32 t0...06123112202 0060: 33 5a 17 0d 31 36 31 32 32 38 31 32 32 30 32 33 3Z..161228122023 0070: 5a 30 19 31 17 30 15 06 03 55 04 03 13 0e 72 6f Z0.1.0...U....ro 0080: 73 61 2e 6b 75 69 6b 69 2e 6e 65 74 30 81 9f 30 sa.kuiki.net0..0 0090: 0d 06 09 2a 86 48 86 f7 0d 01 01 01 05 00 03 81 ...*.H.......... 00a0: 8d 00 30 81 89 02 81 81 00 c8 4f 0c b7 64 f4 56 ..0.......O..d.V 00b0: 60 46 28 90 3e 2f de 3e c0 c2 b0 11 c1 3a 06 06 `F(.>/.>.....:.. 00c0: 33 af ca c5 ca 9a e6 01 54 78 5d 3f c9 bb 06 f3 3.......Tx]?.... 00d0: a5 15 d3 c8 27 2a 9d 8c 0e 5b 28 8e 3d 1f d9 70 ....'*...[(.=..p 00e0: 23 62 37 d6 0d af 6b a3 22 75 9e fd 60 3f a8 53 #b7...k."u..`?.S 00f0: c1 eb 27 e0 33 13 e8 83 a5 94 bf 82 45 82 a0 8d ..'.3.......E... 0100: 9b 5c d6 e4 f5 74 64 b5 e0 b9 00 35 a7 0b 21 8e .\...td....5..!. 0110: e0 05 ca 03 72 f0 23 94 37 f6 6e 43 43 32 73 6d ....r.#.7.nCC2sm 0120: d0 34 8b 5b 99 42 38 3d 9b 02 03 01 00 01 a3 7a .4.[.B8=.......z 0130: 30 78 30 1d 06 03 55 1d 0e 04 16 04 14 a9 65 cf 0x0...U.......e. 0140: ba 5d 61 9c 71 13 24 bf c5 14 94 ad 31 b4 46 15 .]a.q.$.....1.F. 0150: 47 30 49 06 03 55 1d 23 04 42 30 40 80 14 a9 65 G0I..U.#.B0@...e 0160: cf ba 5d 61 9c 71 13 24 bf c5 14 94 ad 31 b4 46 ..]a.q.$.....1.F 0170: 15 47 a1 1d a4 1b 30 19 31 17 30 15 06 03 55 04 .G....0.1.0...U. 0180: 03 13 0e 72 6f 73 61 2e 6b 75 69 6b 69 2e 6e 65 ...rosa.kuiki.ne 0190: 74 82 09 00 9e a2 10 a2 26 11 f7 4b 30 0c 06 03 t.......&..K0... 01a0: 55 1d 13 04 05 30 03 01 01 ff 30 0d 06 09 2a 86 U....0....0...*. 01b0: 48 86 f7 0d 01 01 05 05 00 03 81 81 00 13 b0 2b H..............+ 01c0: 5c af 56 84 c0 fd be 98 7c 73 f9 b8 84 82 b6 6b \.V.....|s.....k 01d0: 9a 42 ac b4 1b 0b 17 26 30 07 ba 9b 47 4c 3a ea .B.....&0...GL:. 01e0: ac f1 c2 ab 20 ec 54 cf 1e 35 89 f7 4a a9 83 9f .... .T..5..J... 01f0: d4 a4 37 5a 0b 65 99 34 c1 69 d3 85 fb f0 c6 32 ..7Z.e.4.i.....2 0200: 23 16 64 cc 5c ab 57 af 22 7a a9 10 86 00 c8 ca #.d.\.W."z...... 0210: af 3d 8c 9e 09 f4 0a 3d d2 18 f2 db be 4f 67 6e .=.....=.....Ogn 0220: 03 35 1b 29 58 8d b7 a7 35 e4 6a 11 af db 0e de .5.)X...5.j..... 0230: d4 63 b4 b5 05 2d 86 ce bb f8 33 2c b8 .c...-....3,. tls_write: want=139, written=139 0000: 16 03 01 00 86 10 00 00 82 00 80 94 a3 c0 f5 22 ..............." 0010: b0 20 0b 6b 8e 43 d8 1c d9 24 c1 dd 70 ef 6f 84 . .k.C...$..p.o. 0020: 77 cf 1a 43 48 01 b7 c8 c5 7d 91 5e c0 75 11 30 w..CH....}.^.u.0 0030: fd 91 81 b4 73 06 ac 62 4b ec 6c e3 c0 c9 9f f6 ....s..bK.l..... 0040: 99 db 79 3d b8 bb 86 f1 e5 9b 30 7c 70 00 10 e6 ..y=......0|p... 0050: 50 f5 9b d3 ca aa 9f 39 9b f2 66 f7 ac 62 28 74 P......9..f..b(t 0060: 5c 46 56 23 8e 9d f4 11 9d 62 8c 40 8c 78 2b 87 \FV#.....b.@.x+. 0070: f6 af 1a e6 7a 18 50 cb 33 77 1a 3b d0 57 8a 99 ....z.P.3w.;.W.. 0080: 05 bc 4e a4 cd a2 cf 78 08 cd e9 ..N....x... tls_write: want=139, written=139 0000: 16 03 01 00 86 0f 00 00 82 00 80 90 1b 7b ac 0c .............{.. 0010: 15 bc e3 67 bd 21 82 0c 01 90 27 61 0c f8 d3 03 ...g.!....'a.... 0020: 47 f9 4b e3 60 20 46 4a db 37 84 0a 09 4c e5 44 G.K.` FJ.7...L.D 0030: e5 b0 37 af a5 7e ff dd 49 6b 95 ad b1 f9 fa d9 ..7..~..Ik...... 0040: a4 2d 08 b8 0a d5 eb 38 14 7d 4d ca b7 ad 56 6b .-.....8.}M...Vk 0050: 66 d1 37 09 cc 71 a8 b1 c3 00 2d da 59 4e ac 83 f.7..q....-.YN.. 0060: 0b 77 55 44 9d 4f e3 5b 55 79 3c 1d e0 8c 68 8d .wUD.O.[Uy<...h. 0070: ad fc 1a ac 8f 89 71 83 cf 1a ec 7d 80 c4 a8 73 ......q....}...s 0080: 4b 32 12 4a f0 6b 1b 73 6c 73 11 K2.J.k.sls. tls_write: want=6, written=6 0000: 14 03 01 00 01 01 ...... tls_write: want=261, written=261 0000: 16 03 01 01 00 76 55 17 a1 e4 65 c4 46 53 1b e2 .....vU...e.FS.. 0010: 2a 12 ca ec 83 64 93 ef 87 c1 a0 e7 89 57 c6 e1 *....d.......W.. 0020: ee 00 06 b2 2b 00 2a 35 e3 dc 3f 98 53 82 ab 87 ....+.*5..?.S... 0030: 80 f9 86 d3 a7 7f 0f 41 f0 29 24 ca 01 6d f8 9a .......A.)$..m.. 0040: a0 35 cb 4e 8e 6c 0b 39 67 f9 5f c2 1b 4f a8 a1 .5.N.l.9g._..O.. 0050: d7 51 4b 52 56 77 e5 d0 c9 5d af 24 f9 30 78 97 .QKRVw...].$.0x. 0060: 11 2e c5 7b c7 db ff 67 cb e1 88 15 9c 4a 7f 1d ...{...g.....J.. 0070: 64 d4 58 96 27 cf a5 9e 10 8c 14 f2 57 32 c5 f1 d.X.'.......W2.. 0080: 57 38 ac bb d6 be 19 8e 05 ff 83 17 14 90 23 3a W8............#: 0090: ad c0 88 81 3c 34 41 6b de 2c 72 dd 2c da 0d 9f ....<4Ak.,r.,... 00a0: d8 7a 9f d3 81 5d e4 06 d4 0a c7 9b d6 ad 4e c5 .z...]........N. 00b0: a4 67 01 f2 6b 46 6e 3a f6 6c 10 ab 54 bd 31 ab .g..kFn:.l..T.1. 00c0: e8 8b a5 ce 71 60 93 ed d0 64 0e 14 3c 36 18 fb ....q`...d..<6.. 00d0: 7e 86 2d 70 6f 8e f3 ad 96 d0 fe cf 7c 5e 24 98 ~.-po.......|^$. 00e0: e3 a0 d7 c0 9e 77 09 50 bc 67 48 06 3c 34 c4 d9 .....w.P.gH.<4.. 00f0: 22 63 a6 69 43 6b 0a 3d 6f 96 72 c9 6a 53 e9 6c "c.iCk.=o.r.jS.l 0100: 98 c7 b5 32 d2 ...2. tls_read: want=5, got=5 0000: 14 03 01 00 01 ..... tls_read: want=1, got=1 0000: 01 . tls_read: want=5, got=5 0000: 16 03 01 00 30 ....0 tls_read: want=48, got=48 0000: 36 df 89 73 10 ff 79 2d 2b 32 b8 3d a0 d8 56 d8 6..s..y-+2.=..V. 0010: f3 c9 24 8d e4 92 12 b5 33 73 bf 98 65 30 9f eb ..$.....3s..e0.. 0020: df 4d 35 df 35 8e cd a7 ad ff b6 35 5c 17 56 aa .M5.5......5\.V. ldap_int_sasl_open: host=shego.kuiki.net SASL/EXTERNAL authentication started ldap_err2string ldap_sasl_interactive_bind_s: Unknown authentication method (-6)