ssl - What are the implications of checking one or both useSSL and useTLS boxes for LDAP config? -
adobe documentation aem 6 says
"check use ssl or use tls checkboxes when configuring ldap identity provider."
what protocol used if check both boxes? tls override ssl config option? seems work 1 or both checked, can't verify protocol used. checking tls sufficient ensure have connection using tls protocol?
there 2 ways secure ldap connections :
- one connect ldaps port (636 default) using ssl (or later tls versions). legacy , non-standard way it, known "use ssl".
- one connect ldap port (389), , enable tls using
ldap starttls extended operation (which negotiates sslv3 or tls protocols). known "use tls".
the underlying version of protocol used (sslv3, tlsv1.0, tlsv1.1...) depends on settings of ldap server or ldap client library. hope helps.
Comments
Post a Comment