Problem with GnuTLS/openssl

[Ognen Duzlevski]

Hello,

I have a Debian 6.0.5 server running OpenLDAP which appears to be linked
against GnuTLS. I have generated a self-signed certificate using certtool
and have successfully used it to authenticate Debian client machines
against the OpenLDAP ldaps:// server in question.

However, when I try to do the same on a CentOS 6 client, I am unable to do
so.

On the CentOS client, if I try to run ldapsearch against the server, I get
the following:

ldap_start_tls: Can't contact LDAP server (-1)
        additional info: TLS error -8101:Certificate type not approved for
application.

On the CentOS client, if I try to run gnutls-cli-debug, I get the following:

gnutls-cli-debug -p 636 ldap.blahblah.com
Resolving 'ldap.blahblah.com'...
Connecting to '10.6.0.11:636'...
Error in %INITIAL_SAFE_RENEGOTIATION
Checking for Safe renegotiation support...

And then it just dies.

I am getting the feeling this has something to do with GnuTLS and openssl?

Any ideas?

Thanks!
OD
-------------- next part --------------
An HTML attachment was scrubbed...
URL: </pipermail/attachments/20120820/796ff048/attachment.htm>