Merge pull request #24 from linuxserver/self-signed-CA-support

Update nginx-ldap-auth-daemon.py

Author: drizuid

readme-vars.yml

@@ -34,6 +34,7 @@ app_setup_block: |
 
 # changelog
 changelogs:
+  - { date: "20.08.20:", desc: "Add support for self-signed CA certs." }
   - { date: "20.02.20:", desc: "Switch to python3." }
   - { date: "19.12.19:", desc: "Rebasing to alpine 3.11." }
   - { date: "01.07.19:", desc: "Fall back to base64 encoding when basic http auth is used." }

root/app/nginx-ldap-auth-daemon.py

@@ -214,6 +214,8 @@ def do_GET(self):
                 self.log_message('LDAP baseDN is not set!')
                 return
 
+            ldap.set_option(ldap.OPT_X_TLS_REQUIRE_CERT, ldap.OPT_X_TLS_ALLOW)
+            
             ctx['action'] = 'initializing LDAP connection'
             ldap_obj = ldap.initialize(ctx['url']);