]> BookStack Code Mirror - bookstack/commit
LDAP: Review, testing and update of LDAP TLS CA cert control 4985/head
authorDan Brown <redacted>
Thu, 2 May 2024 21:56:51 +0000 (22:56 +0100)
committerDan Brown <redacted>
Thu, 2 May 2024 22:11:31 +0000 (23:11 +0100)
commit8087123f2e1823d6584844a540bf4639c55f4fad
treeac4709041d1d2cdc30bcc5067b6105e95d6f88fb
parent18269f2c6036b346d100fd2b82dab600f4ba362f
LDAP: Review, testing and update of LDAP TLS CA cert control

Review of #4913
Added testing to cover option.
Updated option so it can be used for a CA directory, or a CA file.
Updated option name to be somewhat abstracted from original underling
PHP option.

Tested against Jumpcloud.
Testing took hours due to instability which was due to these settings
sticking and being unstable on change until php process restart.
Also due to little documentation for these options.
X_TLS_CACERTDIR option needs cert files to be named via specific hashes
which can be achieved via c_rehash utility.

This also adds detail on STARTTLS failure, which took a long time to
discover due to little detail out there for deeper PHP LDAP debugging.
.env.example.complete
app/Access/LdapService.php
app/Config/services.php
tests/Auth/LdapTest.php