Rechercher une page de manuel
Net::SSLGlue::LDAP.3pm
Langue: en
Version: 2009-05-20 (debian - 07/07/09)
Section: 3 (Bibliothèques de fonctions)
NAME
Net::SSLGlue::LDAP - proper certificate checking for ldaps in Net::LDAPSYNOPSIS
use Net::SSLGlue::LDAP; local %Net::SSLGlue::LDAP = ( SSL_verifycn_name => $hostname_in_cert ); my $ldap = Net::LDAP->new( $hostname, capath => ... ); $ldap->start_tls;
DESCRIPTION
Net::SSLGlue::LDAP modifies Net::LDAP so that it does proper certificate checking using the "ldap" SSL_verify_scheme from IO::Socket::SSL.Because Net::LDAP does not have a mechanism to forward arbitrary parameter for the construction of the underlying socket these parameters can be set globally when including the package or with local settings of the %Net::SSLGlue::LDAP::SSLopts variable.
All of the "SSL_*" parameter from IO::Socket::SSL can be used, especially the following parameter is useful:
- SSL_verifycn_name
- Usually the name given as the hostname in the constructor is used to verify the identity of the certificate. If you want to check the certificate against another name you might specify it with this parameter.
"SSL_ca_path", "SSL_ca_file" for IO::Socket::SSL can be set with the "capath" and "cafile" parameters of Net::LDAP::new and "SSL_verify_mode" can be set with "verify", but the meaning of the values differs ("none" is 0, e.g. disable certificate verification).
SEE ALSO
IO::Socket::SSL, LWP, Net::LDAPCOPYRIGHT
This module is copyright (c) 2008, Steffen Ullrich. All Rights Reserved. This module is free software. It may be used, redistributed and/or modified under the same terms as Perl itself.Contenus ©2006-2024 Benjamin Poulain
Design ©2006-2024 Maxime Vantorre