在LDAP客户机使用证书进行加密之前，它会验证自己正在与之进行交谈的服务器拥有这个证书，这是通过加密一个挑战并验证服务器可以对其进行解密实现的。

Before the LDAP client USES a certificate for encryption, it verifies that the server it is talking with owns the certificate by encrypting a challenge and verifying that the server can decrypt it.

youdao

在使用加密时，客户机在发送初始请求时需要用到服务器证书(因为要使用证书中的服务器公开密匙进行加密)。

When using encryption, the client needs to have the server certificate available when sending the initial request (because the server public key from the certificate is used for the encryption).

youdao