HT4183 The "Trust" setting does not work with 10.8.2, even openssl s_client -connect ...:636 returned CONNECTED(00000003) verify return:1

even openssl s_client -connect ...:636 returned
CONNECTED(00000003)
verify return:1
No client certificate CA names sent
SSL handshake has read 1518 bytes and written 456 bytes
New, TLSv1/SSLv3, Cipher is AES256-SHA
Server public key is 2048 bit
Secure Renegotiation IS supported
Compression: NONE
Expansion: NONE
SSL-Session:
    Protocol  : TLSv1
    Cipher    : AES256-SHA
Key-Arg   : None
    Start Time: 1363044139
    Timeout   : 300 (sec)
    Verify return code: 0 (ok)
Connect to OD without SSL works fine.
Anybody else?
Henri

Hi,
here are some more informations about the problem.
The root CA certificate is imported as trusted in the system keychain of the server and the client. A certificate evaluation returns "valid certificates, trusted ...".
The client bind fails with this messages, e.g. Kerio Control is able the use LDAPS, so it seams just the problem with the trustability of the certificates. Keychain trusts the certificates, OD client bind not, this is not so consistent.
Any idee?
Thanks
Henri
2013-03-14 19:39:02.776804 CET - Trigger - notified opendirectoryd:nodes;lastServerChanged;/LDAPv3/ldaps://macpro....:636
2013-03-14 19:39:02.793467 CET - 71825.330426.330427, Module: AppleODClientLDAP - unable to create connection to LDAP server - ldap_search_ext_s for the ro
otDSE failed with error 'server connection failed' (-1) error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed (self signed cert
ificate in certificate chain)
2013-03-14 19:39:02.793501 CE
CONNECTED(00000003)
depth=1 /C=DE/...
Certificate chain
0 s:/CN=macpro...
   i:/C=DE//OU=IT/CN=*.office.../emailAddress=admin@...
verify error:num=19:self signed certificate in certificate chain
verify return:0

Similar Messages

  • My passcode is working to unlock the screen but does not work with restriction passcode. Should they be different?

    My passcode is working to unlock the screen but does not work with restriction passcode.
    Tried it several times but it did not work, though i can use the phone and all features even after 13 failed attempts.
    Should restriction passcode be different from what i set?

    There is no default restriction password. If you didn't set it someone else may have. If you can't find it then you may have to follow the steps here:
    Forgot passcode for your iPhone, iPad, or iPod touch, or ...
    Do you have a backup which might not have this restriction passcode? If so restore to that backup?

  • I have recently upgraded my iMac Intel G5 iSight to OS 10.6.8 and now the internal mic does not work with skype or facebook. I can here static when playing back clips. Do I need to update firmware or reload old sys parts

    I have recently upgraded my iMac Intel G5 iSight (iMac5,1) to OS 10.6.8 and now the internal mic does not work with skype or facebook. I can here static when playing back clips. Do I need to update firmware or reload old system parts. I have zapped PRAM. The blue indicator in system audio panel will appear for a second as I slide the bar for internal mic but then it disappears. Is there a fix?

    The sound seems very faint but can here static on playback.

  • I generated a new Itunes Account and now the App sync. does not work with theapps I bought with the old account. Is it possible to merge the old and the new account ?

    I generated a new Itunes Account and now the App sync. does not work with the apps I bought with the old account. Is it possible to merge the old and the new account ?

    It is not possible to merge Apple IDs. 
    Why did you create a new one?

  • Hi, The Airport Express does not work with iOS 7.0.4, I appreciate your help to resolve this event. Thank you,

    Hi, The Airport Express does not work with iOS 7.0.4, I appreciate your help to resolve this event. Thank you,

    Please locate the model number of the AirPort Express and post back that information.
    The model number is located on the side of the AirPort Express. It begins with an "A" followed by four numbers.
    We are not sure what you mean by "does not work".  Does this mean that the AirPort Express worked at one time and has just recently stopped working?
    Have you installed a newer operating system on your iOS device recently?
    Or, is this a new AirPort Express that you are trying to configure for the first time?
    If yes, what service will the AirPort Express perform on your network?
    Please remember that we cannot see your network, so we only know as much about your problem as you can tell us.

  • I upgraded Safari in my Mac (10.6.8 Leopard) but the new version does not work with my system so that I now have not a working browser. How can I solve the problem and/or install back my previous Safari version?

    I have upgraded Safari in my Mac, but the new Safari does not work with my system. So I find myself without any working browser. How can I solve this problem and/or install my previous Safari version?

    Reinstall Safari 5.1.10 for OS X 10.6.8: http://support.apple.com/kb/dl1569. Might do the trick.
    But, frankly, I don't think that simply reinstalling the old Safari will work because of all the peripheral, under the hood changes that happen when you upgrade from one version of Safari to another. Reinstalling 5.1.10 may be insufficient to turn back the clock. (This is the moment where a Time Machine or another form of full backup would save your bacon.)
    While you're getting a copy of Safari 5.1.10, get a copy of Firefox (https://www.mozilla.org/en-US/firefox/desktop/), too, so that you have an alternate browser to use as you're sorting matters.

  • Norton 360 premier is not compatible and the identity safe does not work with firefox 4 it worked with earlier version. If there is a solution great otherwise I am going back to IE.

    All my passwords are Norton identity safe protected. If firefox4 does not work with it I am forced to go back to IE. Previous versions had a patch. I only realized the problem after downloading the new update. I wish I never had.

    Symantec need to update their Firefox add-ons so that they are compatible with Firefox 4. They have indicated that for Norton 360 they plan to release an update to Norton 360 to support Firefox 4 in early May - http://us.norton.com/support/kb/web_view.jsp?wv_type=public_web&docurl=20100720113635EN&ln=en_US
    I do not know about the time scale for updates for other Norton products. Pending the update by Symantec, if you want to use the Norton add-ons you will need to downgrade to Firefox 3.6.
    To downgrade to Firefox 3.6 first uninstall Firefox 4, but do not select the option to "Remove my Firefox personal data". If you select that option it will delete your bookmarks, passwords and other user data.
    You can then install the latest version of Firefox 3.6 available from http://www.mozilla.com/en-US/firefox/all-older.html - it will automatically use your current bookmarks, passwords etc.
    To avoid possible problems with downgrading, I recommend going to your profile folder and deleting the following files if they exist - extensions.cache, extensions.rdf, extensions.ini, extensions.sqlite and localstore.rdf. Deleting these files will force Firefox to rebuild the list of installed extensions, checking their compatibility, and reset toolbar customizations.
    For details of how to find your profile folder see https://support.mozilla.com/kb/Profiles

  • Changing the font size does not work with Textarea with HTML Editor

    If you change the font size in the text area of a "Textarea with HTML Editor" item it does not work. I've searched the forum and the only solution I've seen is to use an HTML editor foriegn to APEX. Does anyone have a better solution? Thanks, Elizabeth

    I'm having a similar issue except with HTML Editor Standard.
    What I'm doing is allow someone to write to an HTML Editor Standard field and then an HTML marked up text is saved to a db CLOB column. In another page, I reference this DB column and show it in an HTML Region (I do a computation Before Regions for a hidden item that writes out the html with "htp.p")
    Everything shows up fine EXCEPT the font tags and headings. I'm finding that the HTML Region sets the font size only with the < d i v s t y l e="font-size: large" >and NOT < f o n t size:6 >. When the HTML Editor renders the user's text input, any size changes are made with the < f o n t > tag, which is depreciated anyways, and not with "style". That's why the size is not showing up.
    I can't really figure out why the headings aren't showing up except maybe the css style in the region is overridding it...
    Is there another APEX item type like HTML Editor (which uses FCKEditor) that I can use, or maybe another approach to remedy this issue? Or maybe this post calls for an enhancement with the HTML Editor?{size}{size}
    </div>
    Edited by: maui26 on Mar 4, 2009 10:43 AM

  • HT1947 The Remote app does not work with my McBook Air !!!!

    I have tried several time - but the REMOTE app does not seem to work with Mac Book Air.
    Any help ?
    Any comments?

    why ask in the appletv forum rather then the forum for macbook air or whatever ios device you are running the remote app on?

  • I just upgraded to Firefox 5. How can I get a copy of Firefox 4. The new version does not work with Skype's auto dialer.

    How can I get a copy of the previous version of Firefox? The latest version (5) does not support Skype's auto dialer. I use this tool to be more productive.

    Due to security vulnerabilities, rolling back to Firefox 4.0.1 is not recommended.
    If Firefox disabled some add-ons (especially extensions), it likely is because they include a list of compatible Firefox versions and haven't yet been updated for Firefox 5. If they worked on Firefox 4, there is a good chance they will work on Firefox 5.
    You can force Firefox to ''ignore'' add-on version restrictions by (what else) installing an add-on. Then you can test whether the add-ons important to you actually work in Firefox 5.
    [https://addons.mozilla.org/en-US/firefox/addon/add-on-compatibility-reporter/ Add-on Compatibility Reporter :: Add-ons for Firefox]
    After you install this add-on and restart Firefox, there will still be a message that "--- is incompatible with Firefox 5.0" but the add-on will be enabled and a Disable button will appear for that entry.
    Please report back on your results.

  • Why the Apple products does not work with Adobe flash player?

    Could be better if the Apple products work with Adobe Flash Player, I know that Steve does not like to work with them, but I think will be necessary soon.

    From Adobe's own site:
    *** NOTE: FLASH PLAYER IS NO LONGER BEING UPDATED FOR NEW DEVICE CONFIGURATIONS. FLASH PLAYER WILL NOT BE SUPPORTED ON ANY ANDROID VERSION BEYOND ANDROID 4.0.x ***
    While Flash Player remains on Google Play for installation on Android devices that are certified by the manufacturer, installing Flash Player on an uncertified device may result in unexpected behavior and can potentially destabilize your device. A list of certified devices can be found at http://www.adobe.com/go/certifieddevices. Flash Player WILL NOT be supported on any device shipped with or upgraded to an Android version beyond Android 4.0.x
    Further comments on what is the case on Android devices is irrelevant. Adobe has dropped further development of Flash for mobile devices and Apple has made no indications that they have any plans to do so themselves, so it is highly unlikely that there will ever be a native Flash player for any iOS device.
    'nuff said on the matter. Regards.

  • Where are LETOOLS for USB? The "ADB" Driver does not work with Windows XP

    I just give up with Lenovo's arcane maze of endlessly-looping driver searches.  I managed somehow to get something called an "ADB Driver" which was supposed to allow Windows XP to recognize my tablet as a K1 Ideapad.  I downloaded the 8+mb file which installed fk knows where and plugged in my K1 tablet.  Windows recognized that it had a USB device, and when prompted to hunt for the driver (which of course I couldn't find, since Lenovo sent it into the ether) I had to back out and then hunt through my entire Windows directory for an inf file containing the word "Android". 
    For the unsuspecting, it hides in something called -- get ready for it -- OEM16. 
    I guess the L, N and V keys were missing on the keyboard of the moron who labeled this pos driver.  Oh good programming Lenovo NOT but since a chimpanzee programmed Lenovo's driver site I suppose it's of a piece that a baboon packaged this worthless driver.  This isn't an eCommerce site it's a zoo.
    I guess it was too difficult for Lenovo to include a CD with their Windows USB driver family on it.  I mean . . . that would have cost them $.0000002.  Jesus wept.
    All I want to do is have XP know that the "USB Human Interaction" device I have plugged in is my K1 Lenovo tablet.  Don't send me to Google for a USB/Windows Android driver, they direct everyone to the site of the manufacturer of the tablet.  And don't insult my intelligence by even countenancing the possibility that Google's arch rival would stoop to offer any means for their OS to talk to (cough hack) Android.
    I get that it has to be a Lenovo driver and/or program.  So where the f is it? because this is massively pissing me off.  And one other thing:  No link to Lenovo.  I don't appreciate being manipulated by Lenovo's flash crap only to land on a driver download site that says "We can't find it."
    No.  Direct me please to any non-lenovo download portal that has the most recent version of LETOOLS and hope I don't have to come back here with yet more frustration.  This is the most needlessly idiotic driver service I have ever had the misfortune of being tethered to and I hope never to have to engage with it ever again.  May I please know where LETOOLS can be downloaded?  Thank you.
    Product = K1 IDEAPAD / Born = September 16, 2011 / Sex = Android 3.1 / Skill with Android = None / Skill with Wi-Fi = None

    Hi know-vo,
    I'm sorry that you couldn't find LETools. I've cheked with internal team and was told that actually we do have the software, but it's called "Synchronization Software". Did you try that?
    If you browse to ADB Driver page by clicking "Learn More" in support site, there is a note indicating that this ADB driver works with Synchronization Software.
    Sorry for all the inconvenience caused and. I hope this info above helps.
    Cheers,
    Cleo
    WW Social Media
    T61, T410, x240, Z500, Flex 14
    Important Note: If you need help, post your question in the forum, and include your system type, model number and OS. Do not post your serial number.
    Did someone help you today? Press the star on the left to thank them with a Kudo!
    If you find a post helpful and it answers your question, please mark it as an "Accepted Solution"!
    Follow @LenovoForums on Twitter!
    How to send a private message? --> Check out this article.
    English Community   Deutsche Community   Comunidad en Español   Русскоязычное Сообщество

  • The eyedropper tool does not work with a hue saturation adjustment layer

    I am using PS CC 2014, and the problem I am having is that when I want to use the eyedropper tool to adjust the colour range affected by a Hue/Saturation adjustment layer, rather than selecting the colour in the Properties window for the adjustment layer, use of the eyedropper closes the properties window and changes the foreground colour in my palette.
    Here's the real hitch... the same thing happened to me at school last night where a) the Mac's are older and b) CS6 is still used.
    It's something with my user settings, to be sure, because the prof logged into his account on the Mac I was using in class to test it out, and it worked for him; we logged back into my account and it still did not work for mine.
    Any ideas?
    Thanks for any insights.
    RP

    Indeed Trevor, that did solve the problem. Clearly it was something I changed... wish I knew what. But, I have a list of all the settings changes I made before, so I can figure it out by making one at a time then checking...
    RP

  • I do not want to upgrade to 7.0, I am attending online college and the upgraded version does not work with my school. How can I stop Firefox from upgrading? I have to keep uninstalling the upgrade and installing the old one.

    How can I stop Firefox from automatically upgrading? My on-line college is not compatible with the upgraded version. I have to keep uninstalling the new one and reinstalling the old one.

    It's not a good idea to allow websites to redirect to another site until you know for sure the original site is trustworthy.
    But if you still want to do it (again not a good idea).
    Tools>Options>Advanced>General - In Accessibility, uncheck "warn me when web sites try to redirect..." option.

  • The Find function does not work with one of my pdf files

    I uninstalled whatever version of the reader that had been my computer at installed 11.0.06. Same problem. Seems like the Find function has a problem with just one of my many pdf files.
    For the problem file, the PDF Producer was IIPDFLib2.x, version 1.5. Fast Web View: Yes.
    Windows 8.1
    Rebel1

    I can not select any text, either individual letters or sequences of letters. If I left-click and drag while holding the left button down, I generate a rectangular selection. I can then Ctrl-C the selection and paste it in Word.
    So it is a image, with a pdf filename ending rather than jpg or something similar. That probably also explains why the image quality is much worse than with genuine PDF files.
    Thanks,
    Rebel1

Maybe you are looking for