[python3-ldap] TLS issue

[David Noriega]

On Windows 7 with Python 3.4.1 and python3-ldap 0.9.3.3

I'm trying to create a TLS connection to an ldap server over port 389 and I
provide the CA cert file(in pem format) but I get the following:

Traceback (most recent call last):
  File "C:\Python34\lib\site-packages\ldap3\strategy\baseStrategy.py", line
134,
 in _open_socket
    self.connection.socket =
self.connection.server.tls.wrap_socket(self.connect
ion, do_handshake=True)
  File "C:\Python34\lib\site-packages\ldap3\core\tls.py", line 89, in
wrap_socke
t
    wrapped_socket = ssl.wrap_socket(connection.socket,
keyfile=self.private_key
_file, certfile=self.certificate_file, server_side=False,
cert_reqs=self.validat
e, ssl_version=self.version, ca_certs=self.ca_certs_file,
do_handshake_on_connec
t=do_handshake)
  File "C:\Python34\lib\ssl.py", line 888, in wrap_socket
    ciphers=ciphers)
  File "C:\Python34\lib\ssl.py", line 511, in __init__
    self._context.load_verify_locations(ca_certs)
ssl.SSLError: unknown error (_ssl.c:2734)

During handling of the above exception, another exception occurred:

Traceback (most recent call last):
  File "<stdin>", line 1, in <module>
  File "C:\Python34\lib\site-packages\ldap3\core\connection.py", line 174,
in __
init__
    self.open()
  File "C:\Python34\lib\site-packages\ldap3\strategy\syncWait.py", line 49,
in o
pen
    BaseStrategy.open(self, reset_usage)
  File "C:\Python34\lib\site-packages\ldap3\strategy\baseStrategy.py", line
88,
in open
    self._open_socket(self.connection.server.ssl)
  File "C:\Python34\lib\site-packages\ldap3\strategy\baseStrategy.py", line
139,
 in _open_socket
    raise communication_exception_factory(LDAPSocketOpenError,
e)(self.connectio
n.last_error)
ldap3.core.exceptions.LDAPSocketOpenError: ('socket ssl wrapping error:
unknown
error (_ssl.c:2734)',)
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://mail.python.org/pipermail/python3-ldap/attachments/20140612/d2f27d2a/attachment.html>