Description of problem:

Currently PassSync is not capable of providing useful diagnostic information to troubleshoot SSL/TLS connections related issues. For example when SSL/TLS session fails all you get is something like this:

Ldap bind error in Connect 91: Can't connect to the LDAP server

Which is insufficient to troubleshoot SSL/TLS related session issues since PassSync fails to propagate and communicate any underlying NSS/NSPR errors.

This makes troubleshooting on Windows either a guessing game or makes it quite complicated and time consuming setup to actually peek at the underlying error and its root cause.

Additional info:

What I propose to implement in PassSync is what we have done in Mozilla LDAP client tools long time ago which goes something like this:

if(lastLdapError != LDAP_SUCCESS)
{
    ...
    int sslerr = PORT_GetError();
    fprintf( stderr, "\tTLS/SSL error %d (%s)\n", sslerr,
		    ldapssl_err2string( sslerr ));
    ...
}

There are just a few places in PassSync code where adding this additional diagnostic would help troubleshooting these types of issues tremendously.