<html><head><style type='text/css'>p { margin: 0; }</style></head><body><div style='font-family: Arial; font-size: 12pt; color: #000000'>I have been able to get check_ldap to work fine over the clear on port 389. When I try to use ssl 636 it fails. It can't verify the cert since it is our own CA and not a comercial CA that signed the cert. <BR><BR> <DIV>This is the error I get:</DIV> <DIV><SNIP></DIV> <DIV>ldap_bind: Can't contact LDAP server (-1)<BR> additional info: error:14090086:SSL routines:SSL3_GET_SERVER_CERTIFICATE:certificate verify failed<BR>Could not bind to the LDAP server<BR></SNIP></DIV> <DIV> </DIV> <DIV>I am certain that it is the trust of the cert that is the problem. I have googled this for half the day looking for the method to insert our Root CA as trusted, but have had no luck. Anyone been able to accomplish this? Think of it as a self signed cert installad on our AD domain controllers.</DIV> <DIV> </DIV> <DIV>-paul<BR></DIV></div></body></html>