Re: SSL / TLS 1.0 - exposed in SSF?

--On Thursday, November 21, 2019 6:44 PM +0000 Aaron Bennett abennett@clarku.edu wrote:

Hi,

I'm looking to determine if clients connecting to my OpenLDAP directory are using obsolete protocols (such as SSL, TLS 1.0, etc). Are the connection details exposed in the SSF value of the connection, or exposed elsewhere the log?

This is ITS#7683 https://www.openldap.org/its/index.cgi/?findid=7683

You can obtain a patch that can be applied to RE24 to add this functionality from https://github.com/Zimbra/packages/blob/develop/thirdparty/openldap/patches/ITS7683.patch

Regards, Quanah

--

Quanah Gibson-Mount Product Architect Symas Corporation Packaged, certified, and supported LDAP solutions powered by OpenLDAP: http://www.symas.com