https://bz.apache.org/bugzilla/show_bug.cgi?id=65302
Bug ID: 65302 Summary: Add support for setting com.sun.jndi.ldap.tls.cbtype Product: Tomcat 9 Version: 9.0.39 Hardware: PC OS: Linux Status: NEW Severity: enhancement Priority: P2 Component: Catalina Assignee: dev@tomcat.apache.org Reporter: mmill...@redhat.com Target Milestone: ----- Microsoft advises using LDAP channel binding: https://msrc.microsoft.com/update-guide/en-us/vulnerability/ADV190023 LDAP channel binding was implemented in OpenJDK 16: https://bugs.openjdk.java.net/browse/JDK-8247311 And was backported to OpenJDK 11: https://mail.openjdk.java.net/pipermail/jdk-updates-dev/2021-April/005860.html The tomcat JNDIRealm.getDirectoryContextEnvironment() method needs to be updated to provide the capability to set 'com.sun.jndi.ldap.tls.cbtype' to 'tls-server-end-point' for channel-binding to work[1]. References: [1]https://github.com/apache/tomcat/blob/master/java/org/apache/catalina/realm/JNDIRealm.java#L2603 -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org