jtblin / go-ldap-client

Simple ldap client to authenticate, retrieve basic information and groups for a user.
Other
261 stars 91 forks source link

SSL certificates #26

Open andreaneri opened 4 years ago

andreaneri commented 4 years ago

Hello, i switch on the option "InsecureSkipVerify",

where i should locate the needed certificates? thanks

Andrea

Joffcom commented 4 years ago

If you enable the option to ignore you won’t need to point it to a certificate it will just work.

andreaneri commented 4 years ago

sorry, i mean the opposite, i don't want to ignore

Joffcom commented 4 years ago

Have you tried setting ClientCertificate using tls.LoadX509KeyPair()?

andreaneri commented 4 years ago

i just need to trust my private CA, i dont have key to generare a cert, is it possibile ?

jtblin commented 4 years ago

On Mac, you need to add the Root Certificate to macOS Keychain.

andreaneri commented 4 years ago

@jtblin thanks for your reply, i added our private CA in my macOS Keychain but yet doesnt work, could you suggest some debug? thanks