Skip to content

v0.5

Latest
Compare
Choose a tag to compare
@coudot coudot released this 06 Sep 13:11

⚠️ This release contains fixes for CVE-2020-16093, which concerns LDAP server certificate verification when using LDAPS.

💡 Verification is now forced by default. This behavior can be changed with ldapVerify parameter (set it to allow for example), but this should be a temporary workaround, the good solution is to correctly configure SSL certificate verification.

📃 Changelog:

  • Add ldapVerify option for SSL cert validation (#4)
  • Add specific error handling for old versions (#5)