Cannot Connect to an SSL LDAP Server

Symptom: after providing the LDAP server details in the repository creation wizard, including checking the Use SSL box, pressing Next yields a message box stating the server cannot be contacted.

Possible causes: the improper port number has been provided, the LDAP server is not configured to listen to connections using SSL on that port, or the proper certificates are missing in the Java Web Console key store.

Solution: first check that the LDAP server is configured to listen to SSL connections requests on the port specified in the wizard. If this is correct, ensure that either the Certification Authority or the LDAP server certificate is present in the Java Web Console key store, which is located in /etc/opt/webconsole/keystore. The certificate can be added with the command keytool -import -file <certificate file> -keystore /etc/opt/webconsole/keystore. The default password for that key store is changeit. The Java Web Console needs to be restarted for that change to be visible by the Desktop Manager using the command smcwebserver restart.