Implemented ssl support for LDAPS

a-schild · Oct 2, 2017 · a07d022 · a07d022
1 parent e073179
commit a07d022
Show file tree

Hide file tree

Showing 3 changed files with 7 additions and 2 deletions.
diff --git a/README.md b/README.md
@@ -19,6 +19,7 @@ for **update** istructions read the **update.txt** document
 - v1.1 Added support for speed dial numbers
 - v1.2 Added support for text search
 - v1.3 Added support to correctly shutdown ldap daemon
+- v1.4 Added support for LDAPS
 
 (C) Aarboard AG, www.aarboard.ch, 2017
 

diff --git a/install.txt b/install.txt
@@ -65,7 +65,7 @@ Prerequisites:
 
 On the PBX you have to configure the external LDAP service like this:
 - IP of your LinuxAP
-- Port 389 (Sorry, no TLS yet)
+- Port 636 with TLS (Or 389 without encryption)
 - Username & Password
 - Search base dc=company,dc=ch
 - Mode basic

diff --git a/ldap-server/inno-ldap.pl b/ldap-server/inno-ldap.pl
@@ -85,7 +85,11 @@ sub server_close {
 while ($continue) {
 	# package main;
 	$roothandler= Listener->run(
-		port => 389,
+		port => [ 636, "389/tcp" ],
+		proto => "ssl",       # use ssl as the default
+        ipv  => "*",          # bind both IPv4 and IPv6 interfaces
+        SSL_key_file  => "/home/root/ssl_cert/server.pem",
+        SSL_cert_file => "/home/root/ssl_cert/server.pem",
 		log_level => 4
 		);
 }