Skip to content

Only enable TLS if the file /etc/apacheds/apacheds.jks exists.#12

Open
johanneskastl wants to merge 5 commits intoTremoloSecurity:masterfrom
johanneskastl:20231101_disable_LTS
Open

Only enable TLS if the file /etc/apacheds/apacheds.jks exists.#12
johanneskastl wants to merge 5 commits intoTremoloSecurity:masterfrom
johanneskastl:20231101_disable_LTS

Conversation

@johanneskastl
Copy link
Copy Markdown
Contributor

based on #11 and also contains those fixes.

Only enable TLS if the file /etc/apacheds/apacheds.jks exists.

@johanneskastl
Copy link
Copy Markdown
Contributor Author

I built various container images during testing:
https://hub.docker.com/r/johanneskastl/apacheds/tags

@johanneskastl
Copy link
Copy Markdown
Contributor Author

Hmmm, for some reasons I sometimes get errors in the logs.

2023-11-01 21:22:53 WARN  LdapProtocolHandler:245 - Unexpected exception forcing session to close: sending disconnect notice to client.
javax.net.ssl.SSLException: Improper close state: Status = OK HandshakeStatus = NEED_WRAP                                                                                                    
bytesConsumed = 0 bytesProduced = 7                                                           
        at org.apache.mina.filter.ssl.SslHandler.closeOutbound(SslHandler.java:497)

The container is running and ldapsearch is working properly (without TLS, of course).

@johanneskastl
Copy link
Copy Markdown
Contributor Author

Hmmm, for some reasons I sometimes get errors in the logs.

Sorry, my bad, one should not use ldaps://... if there is no TLS on server side...

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant