Re: Idea for enabling LDAP SSL certificate checking

[Petter Reinholdtsen <pere@hungry.com>]

[Jonas Smedegaard]
> Perhaps what changed was simply host resolving - to more
> aggressively resolve FQDN instead of only hostname.

Could be.  No idea.

Anyway, changing the CN to ldap.intern and adding DNS:ldap and
DNS:localhost as alternative names of the certificate, as well as
making sure clients connect to the FQDN seem to have solved the
certificate checking problem with LDAP.

The fix is in squeeze-test, and all self tests seem to be still
working.

One problem fixed, a million more to go. :)

Happy hacking,
-- 
Petter Reinholdtsen