开发者

How to install multiple client certificates in ubuntu server?

开发者 https://www.devze.com 2023-03-25 05:38 出处:网络
I have a php script to connect 2 different ldaps servers. I learnt that I need to put some configuration on ldap.conf
  • I have a php script to connect 2 different ldaps servers.
  • I learnt that I need to put some configuration on ldap.conf

e.g.

BASE dc=a,dc=开发者_JAVA技巧b,dc=c,dc=d 
URI ldaps://somesite1.com
TLS_REQCERT demand
TLS_CACERT /etc/ssl/certs/1.cert


BASE ou=e,o=f
URI ldaps://somesite1.com
TLS_REQCERT demand 
TLS_CACERT /etc/ssl/certs/2.cert
  • Because they have 2 different bases, I am not sure how to combine them.


The URLs are the same for both servers?

"PHP has no method to set a client certificate" but the link provides a method for working around this using a single certificate. However this isn't going to work when trying to access both LDAP servers in the same PHP script.

The obvious way to address this would be to run stunnel on the webserver with appropriate configs for each LDAP server (see this howto and the docs on the stunnel website) listening on different ports for each LDAP server.

0

精彩评论

暂无评论...
验证码 换一张
取 消