LDAP over SSL does not work with Ubuntu Prolonged Pain

[Nikos Mavrogiannopoulos]

On Tue, May 22, 2012 at 11:23 AM, Thorsten Glaser <t.glaser at tarent.de> wrote:

>> So if I understand your issue is that gnutls 3.0.11 doesn't work
>> for you in  ubuntu but gnutls 3.0.19 works for you in a debian
> Actually, that’s not 3.0.11 but 2.12.14-5ubuntu3 in Ubuntu precise.
> I’ve tracked it down a bit: 2.10.5-1ubuntu3 in Ubuntu oneiric also
> fails; 2.8.6-1ubuntu2.1 in Ubuntu natty (and 2.8.5-2ubuntu0.1 in
> Ubuntu lucid) pass.
> But with those that do not fail, gnutls-cli still outputs a certificate
> validation error

Is your intermediate CA signed by a trusted authority? If yes, could
you try verifying it with certtool?

regards,
Nikos