[Date Prev][Date Next] [Chronological] [Thread] [Top]

Re: SSL / TLS 1.0 - exposed in SSF?





--On Thursday, November 21, 2019 6:44 PM +0000 Aaron Bennett <abennett@clarku.edu> wrote:

Hi,

I'm looking to determine if clients connecting to my OpenLDAP directory
are using obsolete protocols (such as SSL, TLS 1.0, etc).  Are the
connection details exposed in the SSF value of the connection, or exposed
elsewhere the log?

This is ITS#7683 <https://www.openldap.org/its/index.cgi/?findid=7683>

You can obtain a patch that can be applied to RE24 to add this functionality from <https://github.com/Zimbra/packages/blob/develop/thirdparty/openldap/patches/ITS7683.patch>

Regards,
Quanah


--

Quanah Gibson-Mount
Product Architect
Symas Corporation
Packaged, certified, and supported LDAP solutions powered by OpenLDAP:
<http://www.symas.com>