i use Fedora 4 , Openldap 2.3.11 , Heimdal Kerberos , Cyrus-SASL , OpenSSL

i want to connect ldap via SSL, the problem is when i added the following directives to the slapd.conf , the ldap process didn't start:
***************************************************************************************************
TLSCertificateFile /etc/openldap/newcert.pem
TLSCertificateKeyFile /etc/openldap/newcert.pem
***************************************************************************************************
when i removed the two directives, the slapd started!

i created this certificate using OpenSSL , and i placed it into the /etc/openldap

i hope u can help
thanks
Amir Saad
Software Engineer

Try including with these two

TLSCACertificateFile
TLSVerifyClient

thanks so much for ur reply!

i changed the directives and now the slapd started the problem is i got the following error:
**********************************************************************
ldapsearch -H ldaps://localhost/ -b cn=BA,dc=demo,dc=mydomain,dc=org
ldap_sasl_interactive_bind_s: Can't contact LDAP server (-1)

also i tried the following: (Simple Auth)
ldapsearch -H ldaps://localhost/ -b cn=BA,dc=demo,dc=mydomain,dc=org -x
ldap_bind: Can't contact LDAP server (-1)
**********************************************************************

i tried to connect to ldap instead of ldaps and it worked but i need to use TLS/SSL .
i started the slapd using:
slapd -u root -f /usr/local/etc/openldap/slapd.conf -h "ldap:/// ldaps:///"

in the ldap.log:
"TLS negotiation failure"

i hope u can help!
thanks for ur time!