https://bz.apache.org/bugzilla/show_bug.cgi?id=65302
Bug ID: 65302
Summary: Add support for setting com.sun.jndi.ldap.tls.cbtype
Product: Tomcat 9
Version: 9.0.39
Hardware: PC
OS: Linux
Status: NEW
Severity: enhancement
Priority: P2
Component: Catalina
Assignee: dev@tomcat.apache.org
Reporter: mmill...@redhat.com
Target Milestone: -----
Microsoft advises using LDAP channel binding:
https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV190023
LDAP channel binding was implemented in OpenJDK 16:
https://bugs.openjdk.java.net/browse/JDK-8247311
And was backported to OpenJDK 11:
https://mail.openjdk.java.net/pipermail/jdk-updates-dev/2021-April/005860.html
The tomcat JNDIRealm.getDirectoryContextEnvironment() method needs to be
updated to provide the capability to set 'com.sun.jndi.ldap.tls.cbtype' to
'tls-server-end-point' for channel-binding to work[1].
References:
[1]https://github.com/apache/tomcat/blob/master/java/org/apache/catalina/realm/JNDIRealm.java#L2603
--
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org
