Skip to content

Verify SSL certificate #5

@ConsoleCriminal

Description

@ConsoleCriminal

Right now, checking of the SSL certificate of the LDAP server is hardcoded disabled:

ldap.set_option(ldap.OPT_X_TLS_REQUIRE_CERT, ldap.OPT_X_TLS_NEVER)

This barely adds much security at all, except for the connection itself being encrypted. Consider adding an option whether to check or not.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions