Net::SSLGlue::LDAP - proper certificate checking for ldaps in Net::LDAP
use Net::SSLGlue::LDAP; local %Net::SSLGlue::LDAP = ( SSL_verifycn_name => $hostname_in_cert ); my $ldap = Net::LDAP->new( $hostname, capath => ... ); $ldap->start_tls;
Net::SSLGlue::LDAP modifies Net::LDAP so that it does proper certificate checking using the ldap SSL_verify_scheme from IO::Socket::SSL.
ldap
Because Net::LDAP does not have a mechanism to forward arbitrary parameters for the construction of the underlying socket these parameters can be set globally when including the package, or with local settings of the %Net::SSLGlue::LDAP::SSLopts variable.
%Net::SSLGlue::LDAP::SSLopts
All of the SSL_* parameters from IO::Socket::SSL can be used; the following parameter is especially useful:
SSL_*
Usually the name given as the hostname in the constructor is used to verify the identity of the certificate. If you want to check the certificate against another name you can specify it with this parameter.
SSL_ca_path, SSL_ca_file for IO::Socket::SSL can be set with the capath and cafile parameters of Net::LDAP::new and SSL_verify_mode can be set with verify, but the meaning of the values differs (none is 0, e.g. disable certificate verification).
SSL_ca_path
SSL_ca_file
capath
cafile
SSL_verify_mode
verify
none
IO::Socket::SSL, LWP, Net::LDAP
This module is copyright (c) 2008, Steffen Ullrich. All Rights Reserved. This module is free software. It may be used, redistributed and/or modified under the same terms as Perl itself.
To install Net::SSLGlue, copy and paste the appropriate command in to your terminal.
cpanm
cpanm Net::SSLGlue
CPAN shell
perl -MCPAN -e shell install Net::SSLGlue
For more information on module installation, please visit the detailed CPAN module installation guide.