From owner-freebsd-questions@freebsd.org  Wed Sep  7 04:54:43 2016
Return-Path: <owner-freebsd-questions@freebsd.org>
Delivered-To: freebsd-questions@mailman.ysv.freebsd.org
Received: from mx1.freebsd.org (mx1.freebsd.org
 [IPv6:2001:1900:2254:206a::19:1])
 by mailman.ysv.freebsd.org (Postfix) with ESMTP id 65658BC6B31
 for <freebsd-questions@mailman.ysv.freebsd.org>;
 Wed,  7 Sep 2016 04:54:43 +0000 (UTC)
 (envelope-from Olivier.Nicole@cs.ait.ac.th)
Received: from mail.cs.ait.ac.th (mail.cs.ait.ac.th [192.41.170.16])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (Client did not present a certificate)
 by mx1.freebsd.org (Postfix) with ESMTPS id 17E2CB02
 for <freebsd-questions@freebsd.org>; Wed,  7 Sep 2016 04:54:43 +0000 (UTC)
 (envelope-from Olivier.Nicole@cs.ait.ac.th)
Received: from mail.cs.ait.ac.th (localhost [127.0.0.1])
 by mail.cs.ait.ac.th (Postfix) with ESMTP id 9BD09D7886
 for <freebsd-questions@freebsd.org>; Wed,  7 Sep 2016 11:54:40 +0700 (ICT)
DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/simple; d=cs.ait.ac.th; h=
 content-type:content-type:mime-version:message-id:date:date
 :in-reply-to:subject:subject:from:from:received:received
 :received; s=selector1; t=1473224079; x=1475038480; bh=AC5IHhgJX
 4jRg2bYBAoEl6p+64EloACa1NP3XbkdS+4=; b=Ogw+mpbVerbOkcpQa5Z2thfAm
 gH17mTUGYLO/5oewQQl2jxEHutz/Mp9Lsaluna4zFFaFmk/rf9YU309OGThOdKfv
 0pptwaQxk6GSPgtfhiO+5Lvv/giemL6vuLH20EJAl3cdxs/qnHN3I0DkSn2l55TL
 y04qz3txj8c/m/mX18=
X-Virus-Scanned: amavisd-new at cs.ait.ac.th
Received: from mail.cs.ait.ac.th ([127.0.0.1])
 by mail.cs.ait.ac.th (mail.cs.ait.ac.th [127.0.0.1]) (amavisd-new, port 10026)
 with ESMTP id cB-K4AWEv7s1 for <freebsd-questions@freebsd.org>;
 Wed,  7 Sep 2016 11:54:39 +0700 (ICT)
Received: from banyan.cs.ait.ac.th (banyan.cs.ait.ac.th [192.41.170.5])
 (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits))
 (No client certificate requested)
 by mail.cs.ait.ac.th (Postfix) with ESMTPS id 7F21ED7885
 for <freebsd-questions@freebsd.org>; Wed,  7 Sep 2016 11:54:39 +0700 (ICT)
Received: (from on@localhost)
 by banyan.cs.ait.ac.th (8.15.2/8.15.2/Submit) id u874sdrf014862;
 Wed, 7 Sep 2016 11:54:39 +0700 (ICT)
 (envelope-from on@banyan.cs.ait.ac.th)
From: Olivier <Olivier.Nicole@cs.ait.ac.th>
To: freebsd-questions@freebsd.org
Subject: Re: FreeBSD, OpenLDAP and 2048 bits certificates
In-Reply-To: <wu7fupcuyjz.fsf@banyan.cs.ait.ac.th> (message from Olivier on
 Wed, 07 Sep 2016 11:24:48 +0700)
Date: Wed, 07 Sep 2016 11:54:39 +0700
Message-ID: <wu7bn00ux68.fsf@banyan.cs.ait.ac.th>
MIME-Version: 1.0
Content-Type: text/plain
X-BeenThere: freebsd-questions@freebsd.org
X-Mailman-Version: 2.1.23
Precedence: list
List-Id: User questions <freebsd-questions.freebsd.org>
List-Unsubscribe: <https://lists.freebsd.org/mailman/options/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=unsubscribe>
List-Archive: <http://lists.freebsd.org/pipermail/freebsd-questions/>
List-Post: <mailto:freebsd-questions@freebsd.org>
List-Help: <mailto:freebsd-questions-request@freebsd.org?subject=help>
List-Subscribe: <https://lists.freebsd.org/mailman/listinfo/freebsd-questions>, 
 <mailto:freebsd-questions-request@freebsd.org?subject=subscribe>
X-List-Received-Date: Wed, 07 Sep 2016 04:54:43 -0000

I apologize, it seems that upgrading OpenLDAP client from 2.41 to 2.44
did the trick 9either known CA was not yet known in 2.41 or the key
length has changed there).

Best regards,

olivier
--