> Any ideas? Welcome to the wonderful world of keytool and keystores. Just make sure you have the LDAP server's certificate trusted via some mechanism like importing it to the Java trust store(e.g. cacerts) as well. Let me know if you don't have a successful connection.