Bug #73558 [Com]: LDAP_OPT_X_TLS_CACERTFILE silently ignored
Edit report at https://bugs.php.net/bug.php?id=73558&edit=1
ID: 73558
Comment by: mail at ckristo dot net
Reported by: jmaguire at duo dot com
Summary: LDAP_OPT_X_TLS_CACERTFILE silently ignored
Status: No Feedback
Type: Bug
Package: LDAP related
Operating System: Linux
PHP Version: 7.1.0RC6
Assigned To: heiglandreas
Block user comment: N
Private report: N
New Comment:
Hi,
We have an internal CA which we need to add in order to establish a LDAPS connetion successfully. On
our setup, we encounter the same issue, it seems that ldap_set_option($ldap,
LDAP_OPT_X_TLS_CACERTFILE, '<val>') and ldap_set_option($ldap,
LDAP_OPT_X_TLS_CACERTDIR, '<val>') are completely ignored. When setting the
same paths via .ldaprc, PHP LDAP works fine.
Best regards,
Chris
Previous Comments:
------------------------------------------------------------------------
[2017-01-22 04:22:52] php-bugs at lists dot php dot net
No feedback was provided. The bug is being suspended because
we assume that you are no longer experiencing the problem.
If this is not the case and you are able to provide the
information that was requested earlier, please do so and
change the status of the bug back to "Re-Opened". Thank you.
------------------------------------------------------------------------
[2017-01-10 07:48:05] heiglandreas@php.net
There seems to be an issue with that setting in the underlying OpenLDAP-library that ignores
LDAP_OPT_X_TLS_CACERTFILE when LDAP_OPT_X_TLS_CACERTDIR is not set[1].
Could you check whether setting that second option makes a difference?
[1] http://www.openldap.org/lists/openldap-software/200401/msg00777.html
------------------------------------------------------------------------
[2016-11-18 15:19:12] cmb@php.net
Thanks for the quick feedback!
------------------------------------------------------------------------
[2016-11-18 14:51:20] jmaguire at duo dot com
root@1bee5dfaf619:/# php71 -i | grep '^ldap$' -A10
ldap
LDAP Support => enabled
RCS Version => $Id: 0f82354ac9a0aaea23809d237e9f75e99b647142 $
Total Links => 0/unlimited
API Version => 3001
Vendor Name => OpenLDAP
Vendor Version => 20442
Directive => Local Value => Master Value
ldap.max_links => Unlimited => Unlimited
------------------------------------------------------------------------
[2016-11-18 10:42:19] cmb@php.net
Form looking at the sources[1], LDAP_OPT_X_TLS_CACERTFILE is only
supported for LDAP_API_VERSION > 2000.
Which API version does phpinfo() report for you?
[1] <https://github.com/php/php-src/blob/php-7.1.0RC6/ext/ldap/ldap.c#L2238-L2245>
------------------------------------------------------------------------
The remainder of the comments for this report are too long. To view
the rest of the comments, please view the bug report online at
https://bugs.php.net/bug.php?id=73558
--
Edit this bug report at https://bugs.php.net/bug.php?id=73558&edit=1
Thread (10 messages)