Re: ldaps ssl validation

On 3 Aug 2011, at 18:06, Kevan Carstensen wrote:

> We can easily address this by changing the options we pass to
> IO::Socket::SSL's new and start_SSL functions. I'm attaching a patch
> that does this, setting SSL_verifycn_name to 'ldap'. This behaves
> correctly in my tests: LDAPS connections to a server only succeed if the
> server presents a certificate (signed by a CA trusted by the client)
> that correctly identifies the name that the client connected to. 
> 
> Any thoughts? Does this seem appropriate for inclusion in a future
> release of the perl-ldap software?

The patch looks good to me, I think it should go in. Does it force a new minimum version of IO::Socket::SSL?

Chris