Problems connecting to 389 directory server

[Peter Schober]

* Darren Boss <darren.boss at computecanada.ca> [2017-12-05 17:12]:
> Certificate chain
>  0 s:/C=ca/O=CADC/CN=<redacted>
>    i:/O=CADC/OU=CADC Internal Root CA
>  1 s:/O=CADC/OU=CADC Internal Root CA
>    i:/O=CADC/OU=CADC Internal Root CA

OK, then I'd start with:

* fixing the server to not send the CA root cert (the client has
  nothing available to verify the root CA as that's self-signed.)

* putting only that CA root cert in
  %{idp.home}/credentials/CADC_Internal_Root_CA.pem and make that
  world-readable

* these settings in ldap.properties:
  idp.authn.LDAP.sslConfig = certificateTrust
  idp.authn.LDAP.trustCertificates = %{idp.home}/credentials/CADC_Internal_Root_CA.pem

That should be all.
-peter