An Application using LDAP for Authentication - get Certificate Unknow - Errors

Question

We have an application integrated with LDAP for Authentication.
We have Secure LDAP configured and have exchanged Certificates.
We are seeing some relatively Generic Errors logged in the application and a sniffer trace show some errors:

We get a friendly Server Hello then a Fatal - Certificate Unknow error.
This can happen once, twice or more After witch we Do get a successful connection, the authentication request completes and Life goes on...

Any idea on what might generate this condition ?
Any where to look on the LDAP servers ( Should I be able to find someone Over there to talk to ??? )

Thanks,

Don

Answer 1

Hello Gary,

The source and destination ports are there as part of the info column:

Not obvious if you aren't familiar with packet capture traces, sorry.

As we are using a Window LDAP service - I was hopping I could get some information about what we might be able to *see* on the LDAP server side.
( If we can ever get *there * )

One can always hope.
Thanks,
Don

Answer 2

Hello Don,

Inside your green box, there are some lines that just contain "Alert (Level". How do you infer the direction of the message from that information?

The server just provides the certificate and it is seemingly accepted by most of your clients. I am sure that no useful hints to the cause of the problem will be found on the server side.

Gary

Answer 3

very interesting, I'll check it out

Answer 4

Hi Gary,

If you would like to learn more about reading a Wireshark packet trace this is a useful resource. https://wiki.wireshark.org/
I would hope that if I am getting a " Fatal condition for Certificate Unknow" as a reply from the LDAP server - there would be some events logged to that effect on the server side.

Don