If you look at which lists all the bug fixes - security and otherwise - you have to go 77 *pages* through that list to get to the kernel announcement for the one you are running. There are approximately 7 years since the release of CentOS 5.4 that you are currently running. Yep I know but I cannot change anything without having a good argument as the server is currently 'stable'. Ldap_bind: Can't contact LDAP server (-1)įrom the output looks like he cannot validate SHA256 signature but I wonder if server2 has the same openssl why server1 does not support it.Īlthough these servers are supposed to be connected to different environments, both LDAP servers have certificate signed with SHA256WithRSASignature.Ĭould someone help with openssl troubleshooting or explain the difference? Ldap_start_tls: Can't contact LDAP server (-1)Īdditional info: error:0D0C50A1:asn1 encoding routines:ASN1_item_verify:unknown message digest algorithm

TLS certificate verification: Error, certificate signature failure

I am testing LDAP server with ldapsearch command and server2 can respond to query but server1 is giving: See the examples below for a number of sample command lines for this tool.I found many articles about issue with validation of SHA256 signatures, usually it was advised to patch openssl to version 0.9.8o to have full support of SHA256 but I have two servers with exactly the same openssl version, one is working and one not. The criteria for the search request can be specified in a number of different ways, including providing all of the details directly via command-line arguments, providing all of the arguments except the filter via command-line arguments and specifying a file that holds the filters to use, or specifying a file that includes a set of LDAP URLs with the base DN, scope, filter, and attributes to return. Process one or more searches in an LDAP directory server. The ldapsearch Command-Line Tool The ldapsearch Command-Line Tool

Ldapsearch redhat