Actions
Defect #8091
closed
LDAP Authentificaton doesn't verify certificate validity
Status:
Closed
Priority:
Normal
Assignee:
-
Category:
LDAP
Target version:
-
Start date:
2011-04-05
Due date:
% Done:
0%
Estimated time:
Resolution:
Duplicate
Affected version:
Description
Security-Bug:
LDAP Authentificaton doesn't verify certificate validity of the LDAP-server-certificate. Connection to the LDAP-Server with LDAPS is established, even if the server name in the certifitcate doesn't match or the certificate authority is not trustful.
Solution: If something is wrong with the certificate, or the certificate authority is not trustful, the connection to the LDAP-Server should be closed and any LDAP-Login should be disabled.
Related issues
Updated by Toshi MARUYAMA
Updated by Etienne Massip over 13 years ago
Note : not sure it's a true issue report as steven Mr just opened #8090 which is a test issue.
Updated by
Updated by Etienne Massip over 13 years ago
- Status changed from Resolved to Closed
- Resolution set to Duplicate
Indeed, thank you.
Actions