Re: ldaps ssl validation

2011-08-08 Thread Kevan Carstensen
I've attached a revised patch that also bumps the IO::Socket::SSL version in Makefile.PL. Does anyone have any more comments? Thanks, -- Kevan Carstensen Operating Systems Analyst, I&IT Systems, Cal Poly Pomona specify-verifycn-scheme.patch Description: Binary data

Re: ldaps ssl validation

2011-08-03 Thread Kevan Carstensen
Excerpts from Chris Ridd's message of 2011-08-03 11:27:03 -0700: > The patch looks good to me, I think it should go in. Does it force a > new minimum version of IO::Socket::SSL? It looks like perl-ldap currently depends on IO::Socket::SSL version 0.93 or greater. The feature my patch uses appears

Re: ldaps ssl validation

2011-08-03 Thread Chris Ridd
On 3 Aug 2011, at 18:06, Kevan Carstensen wrote: > We can easily address this by changing the options we pass to > IO::Socket::SSL's new and start_SSL functions. I'm attaching a patch > that does this, setting SSL_verifycn_name to 'ldap'. This behaves > correctly in my tests: LDAPS connections to