Ask Ubuntu is a question and answer site for Ubuntu users and developers. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

I'm trying to set up LDAP client access using TLS. I've added the certificates of my CA and both gnutls and openssl connect just fine to the LDAP server. When I try ldapsearch though it still says TLS: peer cert untrusted or revoked

As said: connecting with gnutls-cli results in Peer's certificate is trusted. I've set tls_cacertfile /etc/ssl/certs/ca-certificates in my LDAP configuration and this is the same cacert file I use when I tried connecting with gnutls-cli and openssl.

This rules out any source of error I've found on this topic so far

Where can I go from here?


edit: gnutls version is 2.8.6

share|improve this question
up vote 0 down vote accepted

derp Just came along something by chance... the correct configuration directive is tls_cacert and not tls_cacertfile as the default config file indicates

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.