Before the LDAP client USES a certificate for encryption, it verifies that the server it is talking with owns the certificate by encrypting a challenge and verifying that the server can decrypt it.
在LDAP客户机使用证书进行加密之前，它会验证自己正在与之进行交谈的服务器拥有这个证书，这是通过加密一个挑战并验证服务器可以对其进行解密实现的。
Because verifying identity in the online world is difficult, certificate authorities take over that challenge.
由于在在线领域中证明某个实体的身份非常困难，认证权威就接管了这个挑战。
Even if you don't follow this advice, at least when you get this challenge the first time, import the certificate into the client trust store.
即使您不采纳这个建议，至少应该在第一次遇到警告时把证书导入客户机信任存储库。
应用推荐