[Date Prev][Date Next]
[Chronological]
[Thread]
[Top]
RE: Using TLS
Thanks Quanah.
Using OpenLDAP API, is it correct to set client TLS option to -not- validate server certificates as follows?
int opt;
opt = LDAP_OPT_X_TLS_NEVER;
rc = ldap_set_option(NULL, LDAP_OPT_X_TLS_REQUIRE_CERT, &opt);
Daniel
-----Original Message-----
From: Quanah Gibson-Mount [mailto:quanah@symas.com]
Sent: Friday, June 23, 2017 5:13 PM
To: Daniel Le <daniel.le@exfo.com>; 'openldap-technical@openldap.org' <openldap-technical@openldap.org>
Subject: RE: Using TLS
--On Friday, June 23, 2017 10:08 PM +0000 Daniel Le <daniel.le@exfo.com>
wrote:
> Hi Quanah,
>
> No, I'm fairly new to OpenLDAP and wasn't aware of such global context
> requirement.
>
> Does that only apply to client TLS options?
>
> Is global option set by passing a NULL LDAP handle?
>
> I found ITS#8573 wrt your TLS patch, but the URL:
> <http://www.openldap.org/lists/openldap-devel/attachments/20170608/2ae
> 39d 03/attachment.bin> is not found. Can you point me to where to
> download or see the patch? Has it been integrated into 2.4.45?
Hi Daniel,
You can view it here:
<https://github.com/quanah/openldap-scratch/commit/cff66313706c607d4df6f074255703da8d87b35a.patch>
and no, it would be part of 2.5 once submitted, although it applies just fine for me to 2.4
--Quanah
--
Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>