The most common SSL issue is the power of attorney for the certificate used in the connection.
If your SSL certificate of an SSL LDAP server is not signed by a well-known CA or, rather, a certification authority known by your SSL library, then it will usually fail. To solve this problem, you must make your SSL library a trusted CA.
Windows (IE), Firefox, Safari, etc. have their own key storage mechanisms, and you can import CA trusted root certificates into them. Then all the certificates signed by this CA are now trustworthy.
Java uses JKS repository files, old Netscape uses cert.db7 or cert.db8 files. I donβt know what PHP uses, however you should understand this aspect.
source share