proxmox-mirrors/pve-access-control
1
0
Fork 0
mirror of https://git.proxmox.com/git/pve-access-control synced 2025-06-12 11:12:34 +00:00
Code Issues Actions Packages Projects Releases Wiki Activity

ldaps: support TLS 1.3 as SSL version

Browse Source 
Signed-off-by: Thomas Lamprecht <t.lamprecht@proxmox.com>
This commit is contained in:
Thomas Lamprecht 2019-11-06 20:23:21 +01:00
parent 07dd90d731
commit 3b7eaef10f
2 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
PVE/Auth/AD.pm
View File

@ -34,9 +34,9 @@ sub properties {
}, },
sslversion => { sslversion => {
description => "LDAPS ssl version.", description => "LDAPS TLS/SSL version. It's not recommended to use version older than 1.2!",
type => 'string', type => 'string',
enum => [qw(tlsv1 tlsv1_1 tlsv1_2)], enum => [qw(tlsv1 tlsv1_1 tlsv1_2 tlsv1_3)],
optional => 1, optional => 1,
}, },
default => { default => {
@ -116,7 +116,7 @@ my $authenticate_user_ad = sub {
} }
if ($config->{secure}) { if ($config->{secure}) {
$ad_args{sslversion} = $config->{sslversion} ? $config->{sslversion} : 'tlsv1_2'; $ad_args{sslversion} = $config->{sslversion} || 'tlsv1_2';
} }
my $ldap = Net::LDAP->new($conn_string, %ad_args) || die "$@\n"; my $ldap = Net::LDAP->new($conn_string, %ad_args) || die "$@\n";

2
PVE/Auth/LDAP.pm
View File

@ -111,7 +111,7 @@ my $authenticate_user_ldap = sub {
} }
if ($config->{secure}) { if ($config->{secure}) {
$ldap_args{sslversion} = $config->{sslversion} ? $config->{sslversion} : 'tlsv1_2'; $ldap_args{sslversion} = $config->{sslversion} || 'tlsv1_2';
} }
my $ldap = Net::LDAP->new($conn_string, %ldap_args) || die "$@\n"; my $ldap = Net::LDAP->new($conn_string, %ldap_args) || die "$@\n";