python-ldap and SSL?

[David Casti]

Hello,

I have Python 2.2.2, the current version of python-ldap, openldap, and
openssl installed.

I am trying to connect over SSL to an LDAP server listening on port 636, so
I try --

import ldap
l = ldap.initialize( 'ldaps://target:636' )
l.bind_s( '', '', ldap.AUTH_SIMPLE )

-- but no matter what I do, I get the following traceback --

Traceback (most recent call last):

  File "<stdin>", line 1, in ?

  File "/usr/local/lib/python2.2/site-packages/ldap/ldapobject.py", line
429, in simple_bind

    return self.bind(who,passwd,_ldap.AUTH_SIMPLE)

  File "/usr/local/lib/python2.2/site-packages/ldap/ldapobject.py", line
147, in bind

    return self._ldap_call(self._l.bind,who,cred,method)

  File "/usr/local/lib/python2.2/site-packages/ldap/ldapobject.py", line 90,
in _ldap_call

    result = func(*args,**kwargs)

ldap.SERVER_DOWN: {'info': 'error:14090086:SSL
routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed', 'desc':
"Can't contact LDAP server"}

-- I have tried adding --

ldap.set_option( ldap.OPT_X_TLS_CACERTFILE, '/path/ca.crt' )

-- right after 'import ldap', but it had no effect.

I read the thread on this list from April 2002 which suggested that this
should all work... any ideas?  SSL support appears to be very lightly
documented...

Thanks,
David.