-
Notifications
You must be signed in to change notification settings - Fork 16
Open
Description
Right now, checking of the SSL certificate of the LDAP server is hardcoded disabled:
ldap.set_option(ldap.OPT_X_TLS_REQUIRE_CERT, ldap.OPT_X_TLS_NEVER)
This barely adds much security at all, except for the connection itself being encrypted. Consider adding an option whether to check or not.
Metadata
Metadata
Assignees
Labels
No labels