Hi
I try to use LDAP in my OpenVPN-AS. I have set up all Data. But the User can't logged in.
I have found this command
./authcli -u myUsername
AUTH_RETURN
status : COM_FAULT
reason : Cannot connect to LDAP server ldaps://myldap.server.tld: ('unable to open socket', [(LDAPSocketOpenError('socket ssl wrapping error: [SSL: CERTIFICATE_VERIFY_FAILED] certificate verify failed (_ssl.c:727)',), ('10.10.1.250', 636))]) (facility='initialize [myldap.server.tld]')
The rootCA of my Windows PKI is insert in Debian.
I try openssl to check:
openssl s_client -connect myldap.server.tld:636
SSL handshake has read 4280 bytes and written 480 bytes
Verification: OK
---
New, TLSv1.2, Cipher is ECDHE-RSA-AES256-GCM-SHA384
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
No ALPN negotiated
SSL-Session:
Protocol : TLSv1.2
Cipher : ECDHE-RSA-AES256-GCM-SHA384
Session-ID: XXXXX
Session-ID-ctx:
Master-Key: XXXXX
PSK identity: None
PSK identity hint: None
SRP username: None
Start Time: 1586774837
Timeout : 7200 (sec)
Verify return code: 0 (ok)
Extended master secret: yes
So I think the certificate is ok. Does some one have a idea?
In other Software I must insert the fingerprint of my Domain Controler SSL Certificate that it works. But in OpenVPN i don't find a solution.
Thank you for help
Koda
