GSP
Quick Navigator

Search Site

Unix VPS
A - Starter
B - Basic
C - Preferred
D - Commercial
MPS - Dedicated
Previous VPSs
* Sign Up! *

Support
Contact Us
Online Help
Handbooks
Domain Status
Man Pages

FAQ
Virtual Servers
Pricing
Billing
Technical

Network
Facilities
Connectivity
Topology Map

Miscellaneous
Server Agreement
Year 2038
Credits
 

USA Flag

 

 

Man Pages


Manual Reference Pages  -  NET::SSLGLUE::LDAP (3)

.ds Aq ’

NAME

Net::SSLGlue::LDAP - proper certificate checking for ldaps in Net::LDAP

CONTENTS

SYNOPSIS



    use Net::SSLGlue::LDAP;
    local %Net::SSLGlue::LDAP = ( SSL_verifycn_name => $hostname_in_cert );
    my $ldap = Net::LDAP->new( $hostname, capath => ... );
    $ldap->start_tls;



DESCRIPTION

Net::SSLGlue::LDAP modifies Net::LDAP so that it does proper certificate checking using the ldap SSL_verify_scheme from IO::Socket::SSL.

Because Net::LDAP does not have a mechanism to forward arbitrary parameters for the construction of the underlying socket these parameters can be set globally when including the package, or with local settings of the %Net::SSLGlue::LDAP::SSLopts variable.

All of the SSL_* parameters from IO::Socket::SSL can be used; the following parameter is especially useful:
SSL_verifycn_name Usually the name given as the hostname in the constructor is used to verify the identity of the certificate. If you want to check the certificate against another name you can specify it with this parameter.
SSL_ca_path, SSL_ca_file for IO::Socket::SSL can be set with the capath and cafile parameters of Net::LDAP::new and SSL_verify_mode can be set with verify, but the meaning of the values differs (none is 0, e.g. disable certificate verification).

SEE ALSO

IO::Socket::SSL, LWP, Net::LDAP

COPYRIGHT

This module is copyright (c) 2008, Steffen Ullrich. All Rights Reserved. This module is free software. It may be used, redistributed and/or modified under the same terms as Perl itself.
Search for    or go to Top of page |  Section 3 |  Main Index


perl v5.20.3 NET::SSLGLUE::LDAP (3) 2015-04-28

Powered by GSP Visit the GSP FreeBSD Man Page Interface.
Output converted with manServer 1.07.