Provide SSL certificate verification

kvspb / nginx-auth-ldap

LDAP authentication module for nginx

BSD 2-Clause "Simplified" License

735 stars 252 forks source link

Provide SSL certificate verification #100

Closed victorhahncastell closed 8 years ago

jbguerraz commented 8 years ago

Looks cool! Would be great to get it merged :) Thx guys!

jszwedko commented 8 years ago

One thing to note here is that this does not validate the subject name of the served certificate which still exposes some opportunity for man-in-the-middle-attacks.

victorhahncastell commented 8 years ago

@jszwedko, thanks for pointing out this obvious mistake. Amended as PR 121.