how to set certificate file for ssl or tls connection

[evifere]

Hi,

to avoid using C:\OpenLDAP\sysconf\ldap.conf to define

TLS_CACERT C:\OpenLDAP\sysconf\ca.pem
TLS_REQCERT hard

you can do the following in your env file

LDAP_DEFAULT_OPT_X_TLS_CACERTFILE="C:\OpenLDAP\test\Maquette-CA.crt"
LDAP_DEFAULT_OPT_X_TLS_REQUIRE_CERT=1
LDAP_DEFAULT_SSL="false"
LDAP_DEFAULT_TLS="true"

or

LDAP_DEFAULT_OPT_X_TLS_CACERTFILE="C:\OpenLDAP\test\Maquette-CA.crt"
LDAP_DEFAULT_OPT_X_TLS_REQUIRE_CERT=1
LDAP_DEFAULT_SSL="true"
LDAP_DEFAULT_TLS="false"

LDAP_DEFAULT_OPT_X_TLS_REQUIRE_CERT has the value among the following

define LDAP_OPT_X_TLS_NEVER 0
define LDAP_OPT_X_TLS_HARD 1
define LDAP_OPT_X_TLS_DEMAND 2
define LDAP_OPT_X_TLS_ALLOW 3
define LDAP_OPT_X_TLS_TRY 4

It was not clear for me when i first read https://ldaprecord.com/docs/core/v2/configuration/#debugging

Hope this helps.

[stevebauman]

Thanks @evifere! I'll update the documentation with this information 👍