/
How To Setup LDAPS

How To Setup LDAPS

Mar 06, 2020

 

OpenSSL

  1. Download OpenSSL

    1. https://slproweb.com/products/Win32OpenSSL.html

    2. Use the EXE option for Win64 OpenSSL v1.1.1 d Light.



  2. Install OpenSSL

    1. Accept the license agreement and click next.

    2. Use the default location and click next.



    3. Select "The Windows system directory "



    4. Click Install

    5. Un-check donation options then click finish.



  3. Add OpenSSL to the system path

    1. Open system from the control panel.



    2. Click on Advanced system settings.



    3. Click on environment variables.



    4. Edit Path in the system variables section.



    5. Click New.



    6. Enter the path to OpenSSL



    7. Click ok to exit the edit environment variable window.

    8. Click ok to exit the environment variable window.

    9. Click ok to exit System Properties.

    10. Open CMD and type OpenSSL to verify the path is working correctly.

Enable LDAP over SSL (LDAPS) for Microsoft Active Directory servers

The contents of the below instructions have been taken from Peter Mescalchin's article, Enable LDAP over SSL (LDAPS) for Microsoft Active Directory servers.

 

Microsoft active directory servers will default to offer LDAP connections over unencrypted connections (boo!).

The steps below will create a new self-signed certificate appropriate for use with and thus enabling LDAPS for an AD server. Of course, the "self-signed" portion of this guide can be swapped out with a real vendor purchased certificate if required.

Steps have been tested successfully with Windows Server 2012R2 but should work with Windows Server 2008 without modification. Requires a working OpenSSL install (ideally Linux/OSX) and (obviously) a Windows Active Directory server.