[Fedora-directory-users] TLS trace: SSL3 alert write:fatal:unknown CA

[Jeff Gamsby]

I am trying to get FDS 1.0.2 working in SSL mode. I am using a OpenSSL 
CA, I have installed the Server Cert and the CA Cert, can start FDS in 
SSL mode, but when I run
ldapsearch -x -ZZ  I get TLS trace: SSL3 alert write:fatal:unknown CA.

In /etc/ldap.conf, I have put in
TLS_CACERT /path/to/cert
TLSREQCERT allow
ssl on
ssl start_tls

If I run
openssl s_client -connect localhost:636 -showcerts -state -CAfile 
/path/to/cacert.pem

It looks OK

Please help

Thanks

-- 
Jeff Gamsby
Center for X-Ray Optics
Lawrence Berkeley National Laboratory
(510) 486-7783