Project

General

Profile

Actions

Defect #8091

closed

LDAP Authentificaton doesn't verify certificate validity

Added by steven Mr almost 13 years ago. Updated almost 13 years ago.

Status:
Closed
Priority:
Normal
Assignee:
-
Category:
LDAP
Target version:
-
Start date:
2011-04-05
Due date:
% Done:

0%

Estimated time:
Resolution:
Duplicate
Affected version:

Description

Security-Bug:
LDAP Authentificaton doesn't verify certificate validity of the LDAP-server-certificate. Connection to the LDAP-Server with LDAPS is established, even if the server name in the certifitcate doesn't match or the certificate authority is not trustful.

Solution: If something is wrong with the certificate, or the certificate authority is not trustful, the connection to the LDAP-Server should be closed and any LDAP-Login should be disabled.


Related issues

Is duplicate of Redmine - Defect #8068: LDAP Authentificaton doesn't verify certificate validityClosed2011-04-05

Actions
Actions #1

Updated by Toshi MARUYAMA almost 13 years ago

  • Category changed from I18n to LDAP
Actions #2

Updated by Etienne Massip almost 13 years ago

Note : not sure it's a true issue report as steven Mr just opened #8090 which is a test issue.

Actions #3

Updated by Tony Edmonds almost 13 years ago

  • Status changed from New to Resolved

Duplicate of #8068

Actions #4

Updated by Etienne Massip almost 13 years ago

  • Status changed from Resolved to Closed
  • Resolution set to Duplicate

Indeed, thank you.

Actions

Also available in: Atom PDF