Openfire 4.1.3 LDAPS 636 AND TLS 389

Hello! I trying to configure AD 2008R2+openfire4.1.3 primary integration.

Domain credentials, base DN, etc are defined. “Test settings” is success on port 389 without SSL or TLS.

I wanna to change LDAP to LDAPS => changing port to 636 and change the option

“Use SSL: Enable SSL connections to your LDAP server, default port is usually 636” from “no” to “yes”. Click on “test settings”. Getting above:

Status: Error

Error connecting to the LDAP server. Ensure that the directory server is running at the specified host name and port and that a firewall is not blocking access to the server.

Firewall on the server is disabled, i can telnet to server:636 from client machine.

I have attached output from server (ldaps.txt)

Then i trying to enable

“Use StartTLS: Enable StartTLS connections to your LDAP server, default port is usually 389” - changing to “yes” and port back to 389 (i have also disabled “Use SSL: Enable SSL connections to your LDAP server, default port is usually 636” option) - it giving back above:

Status: Error

[LDAP: error code 52 - 00000000: LdapErr: DSID-0C090E17, comment: Error initializing SSL/TLS, data 0, v1db1]

(output attached to starttls error.txt)

What i do wrong?
ldaps error.txt.zip (1177 Bytes)
starttls error.txt.zip (1003 Bytes)