<p>SSL/TLS support is dependent on which LDAP toolkit has been
linked to <glossary>APR</glossary>. As of this writing, APR-util supports:
<a href="http://www.openldap.org/">OpenLDAP SDK</a> (2.x or later),
- <a href="http://developer.novell.com/ndk/cldap.htm">Novell LDAP
- SDK</a>, <a href="https://wiki.mozilla.org/LDAP_C_SDK">
- Mozilla LDAP SDK</a>, native Solaris LDAP SDK (Mozilla based) or the
+ <a href="https://wiki.mozilla.org/LDAP_C_SDK">Mozilla LDAP SDK</a>, native Solaris LDAP SDK (Mozilla based) or the
native Microsoft LDAP SDK. See the <a href="http://apr.apache.org">APR</a>
website for details.</p>
</section>
- <section id="settingcerts-novell"><title>Novell SDK</title>
-
- <p>One or more CA certificates must be specified for the Novell
- SDK to work correctly. These certificates can be specified as
- binary DER or Base64 (PEM) encoded files.</p>
-
- <p>Note: Client certificates are specified globally rather than per
- connection, and so must be specified with the <directive module="mod_ldap"
- >LDAPTrustedGlobalCert</directive>
- directive as below. Trying to set client certificates via the
- <directive module="mod_ldap">LDAPTrustedClientCert</directive>
- directive will cause an error to be logged
- when an attempt is made to connect to the LDAP server.</p>
-
- <p>The SDK supports both SSL and STARTTLS, set using the
- <directive module="mod_ldap">LDAPTrustedMode</directive> parameter.
- If an ldaps:// URL is specified,
- SSL mode is forced, override this directive.</p>
-
- <highlight language="config">
-# Specify two CA certificate files
-LDAPTrustedGlobalCert CA_DER /certs/cacert1.der
-LDAPTrustedGlobalCert CA_BASE64 /certs/cacert2.pem
-# Specify a client certificate file and key
-LDAPTrustedGlobalCert CERT_BASE64 /certs/cert1.pem
-LDAPTrustedGlobalCert KEY_BASE64 /certs/key1.pem [password]
-# Do not use this directive, as it will throw an error
-#LDAPTrustedClientCert CERT_BASE64 /certs/cert1.pem
- </highlight>
-
- </section>
-
<section id="settingcerts-openldap"><title>OpenLDAP SDK</title>
<p>One or more CA certificates must be specified for the OpenLDAP
<li>CERT_BASE64 - PEM encoded client certificate</li>
<li>CERT_KEY3_DB - Netscape key3.db client certificate database file</li>
<li>CERT_NICKNAME - Client certificate "nickname" (Netscape SDK)</li>
- <li>CERT_PFX - PKCS#12 encoded client certificate (Novell SDK)</li>
+ <li>CERT_PFX - PKCS#12 encoded client certificate</li>
<li>KEY_DER - binary DER encoded private key</li>
<li>KEY_BASE64 - PEM encoded private key</li>
- <li>KEY_PFX - PKCS#12 encoded private key (Novell SDK)</li>
+ <li>KEY_PFX - PKCS#12 encoded private key</li>
</ul>
</usage>
</directivesynopsis>