Hi,<div><br></div><div>I´m tyring to test a SSL connection from one server(linux) to 389DS using openssl:</div><div><br></div><div><br></div><div>openssl s_client -connect MY_389_SERVER:636 -cert local_server.crt -key local_server.key -CAfile CA-AD.crt </div>

<div><br></div><div>And I got this error on my 389DS log:</div><div><br></div><div><div>[31/Aug/2012:14:04:57 -0300] conn=146531 Netscape Portable Runtime error -8101 (Certificate type not approved for application.); unauthenticated client E=<a href="mailto:email@email.com" target="_blank">email@email.com</a>,CN=server.my.domain,OU=GTI,O=COMPANY,L=Rio de Janeiro,ST=Rio de Janeiro,C=BR; issuer CN=MY AD</div>

</div><div><br></div><div><br></div><div><br></div><div>The both certificates (my 389DS and local server(linux) were generated by my AD Server. Just to notify that I already import my CA certificate into 389 database (I have AD password replication working using the AD CA).</div>

<div><br></div><div><br></div><div><br></div><div>What am I missing?</div><div><br></div><div>Thanks a lot.</div>