search

arthurdejong / nss-pam-ldapd

NSS and PAM modules for lookups using LDAP
https://arthurdejong.org/nss-pam-ldapd/
GNU Lesser General Public License v2.1
54 stars 42 forks source link

tls_reqsan parameter useless #69

Open Barthez98 opened 4 months ago

Barthez98 commented 4 months ago

handle_tls_reqsan() function uses get_tls_reqcert() instead get_tls_reqsan() function, it means tls_reqsan parameter is useless. For the moment, SAN is checked only when tls_reqcert is equal to 'try' or 'hard', even if tls_reqsan is equal to 'never'