Addresses the LDAPS vulnerability to MITM attacks by properly authenticating the hostname#259

Closed

JPvRiel wants to merge 3 commits intoruby-ldap:masterfrom

JPvRiel:master

Commits on Jan 14, 2016

Addresses the LDAPS vulnerability to MITM attacks by checking hostname against the CN or SAN in X509 Cert if OpenSSL::SSL::VERIFY_NONE is *not* set. Effectively, it bundles the proper host authent…
JPvRiel-SB
committed

Commits on Jan 20, 2016

fix a regression in a prior commit and check if :verify_mode key exists otherwise a nil error results for connections without encryption
JPvRiel
committed

Commits on Jan 27, 2016

second fix to conditonal logic after more extensive positive and negative manual test cases
JPvRiel
committed