Re: SSL based ldap server

Friday, 2 October 2015

Hi Michael,

Thanks for explaining. I just so far performed server side validation using
the link <http://www.openldap.org/faq/data/cache/185.html>

Can you please guide me how can we perform client side verification? Means
how to set subjectAltName extension?

On Fri, Oct 2, 2015 at 4:10 PM, Michael Ströder <michael(a)stroeder.com&gt;
wrote:

...
 Aneela Saleem wrote:
 > What if i want to access LDAP from external source? how would it
 recognize
 > platalytics.com?

 Hope fully the client perfoms the TLS hostname check as defined in RFC
 6125.

 All hostnames and IP addresses used by clients have to be listed in the
 subjectAltName extension.

 Ciao, Michael.